CISA Known Exploited Vulnerabilities
KEV additions — March 2024
10 CVEs entered the KEV catalog in March 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added March 26, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-24955ransomware | Microsoft SharePoint Server Code Injection Vulnerability | 7.2 | 85.0 % | Apr 16, 2024 |
Added March 25, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-7256 | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | 9.8 | 97.1 % | Apr 15, 2024 |
| CVE-2021-44529ransomware | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 9.8 | 99.1 % | Apr 15, 2024 |
| CVE-2023-48788ransomware | Fortinet FortiClient EMS SQL Injection Vulnerability | 9.8 | 98.4 % | Apr 15, 2024 |
Added March 7, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-27198ransomware | JetBrains TeamCity Authentication Bypass Vulnerability | 9.8 | 99.9 % | Mar 28, 2024 |
Added March 6, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 1.5 % | Mar 27, 2024 |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 1.4 % | Mar 27, 2024 |
Added March 5, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity | 9.8 | 97.8 % | Mar 26, 2024 |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability | 5.5 | 0.3 % | Mar 26, 2024 |
Added March 4, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21338ransomware | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | 7.8 | 59.8 % | Mar 25, 2024 |