CISA Known Exploited Vulnerabilities
KEV additions — February 2024
9 CVEs entered the KEV catalog in February 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added February 29, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 8.4 | 21.6 % | Mar 21, 2024 |
Added February 22, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-1709ransomware | ConnectWise ScreenConnect Authentication Bypass Vulnerability | 10 | 100.0 % | Feb 29, 2024 |
Added February 15, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-3259ransomware | Cisco ASA and FTD Information Disclosure Vulnerability | 7.5 | 71.8 % | Mar 7, 2024 |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | 9.8 | 12.6 % | Mar 7, 2024 |
Added February 13, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 7.6 | 27.8 % | Mar 5, 2024 |
| CVE-2024-21412ransomware | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | 8.1 | 99.4 % | Mar 5, 2024 |
Added February 12, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 6.1 | 63.7 % | Mar 4, 2024 |
Added February 9, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21762ransomware | Fortinet FortiOS Out-of-Bound Write Vulnerability | 9.8 | 83.4 % | Feb 16, 2024 |
Added February 6, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 41.4 % | Feb 27, 2024 |