CISA Known Exploited Vulnerabilities

KEV additions — May 2024

13 CVEs entered the KEV catalog in May 2024.

Added May 30, 20242

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2024-1086ransomware	Linux Kernel Use-After-Free Vulnerability	7.8	85.2 %	June 20, 2024
CVE-2024-24919ransomware	Information disclosure	8.6	94.4 %	June 20, 2024

Added May 29, 20241

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2024-4978	Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability	8.4	12.8 %	June 19, 2024

Added May 28, 20241

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2024-5274	Google Chromium V8 Type Confusion Vulnerability	9.6	6.6 %	June 18, 2024

Added May 23, 20241

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2020-17519	Apache Flink Improper Access Control Vulnerability	7.5	94.4 %	June 13, 2024

Added May 20, 20242

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2023-43208ransomware	NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability	9.8	94.4 %	June 10, 2024
CVE-2024-4947	Google Chromium V8 Type Confusion Vulnerability	9.6	0.3 %	June 10, 2024

Added May 16, 20242

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2021-40655	D-Link DIR-605 Router Information Disclosure Vulnerability	7.5	92.6 %	June 6, 2024
CVE-2024-4761	chromium-browser: Out of bounds write in V8	8.8	3.1 %	June 6, 2024

Added May 14, 20242

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2024-30040	Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability	8.8	23.5 %	June 4, 2024
CVE-2024-30051ransomware	Microsoft DWM Core Library Privilege Escalation Vulnerability	7.8	43.5 %	June 4, 2024

Added May 13, 20241

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2024-4671	chromium-browser: use after free in Visuals	9.6	0.2 %	June 3, 2024

Added May 1, 20241

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2023-7028	GitLab Community and Enterprise Editions Improper Access Control Vulnerability	9.8	93.4 %	May 22, 2024

← All recent KEV additions