CISA Known Exploited Vulnerabilities
KEV additions — June 2024
8 CVEs entered the KEV catalog in June 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added June 26, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 76.6 % | Jul 17, 2024 |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 10 | 99.9 % | Jul 17, 2024 |
| CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability | 7.8 | 10.2 % | Jul 17, 2024 |
Added June 13, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-26169ransomware | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | 7.8 | 4.0 % | Jul 4, 2024 |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability | 7.8 | 3.0 % | Jul 4, 2024 |
| CVE-2024-4358 | Registration Authentication Bypass Vulnerability | 9.8 | 97.5 % | Jul 4, 2024 |
Added June 12, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-4577ransomware | PHP-CGI OS Command Injection Vulnerability | 9.8 | 100.0 % | Jul 3, 2024 |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 7.8 | 0.8 % | Jul 3, 2024 |