CISA Known Exploited Vulnerabilities
KEV additions — August 2024
19 CVEs entered the KEV catalog in August 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added August 28, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | 8.8 | 18.5 % | Sep 18, 2024 |
Added August 27, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability | 9.8 | 99.4 % | Sep 17, 2024 |
Added August 26, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | 9.6 | 21.1 % | Sep 16, 2024 |
Added August 23, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-39717 | Versa Director Dangerous File Type Upload Vulnerability | 7.2 | 4.0 % | Sep 13, 2024 |
Added August 21, 20244
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-31196 | Microsoft Exchange Server Information Disclosure Vulnerability | 7.2 | 54.1 % | Sep 11, 2024 |
| CVE-2021-33044 | Dahua IP Camera Authentication Bypass Vulnerability | 9.8 | 100.0 % | Sep 11, 2024 |
| CVE-2021-33045 | Dahua IP Camera Authentication Bypass Vulnerability | 9.8 | 99.6 % | Sep 11, 2024 |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 8.4 | 25.2 % | Sep 11, 2024 |
Added August 19, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23897ransomware | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 9.8 | 100.0 % | Sep 9, 2024 |
Added August 15, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9.8 | 84.6 % | Sep 5, 2024 |
Added August 13, 20246
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7 | 6.3 % | Sep 3, 2024 |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 7.8 | 1.6 % | Sep 3, 2024 |
| CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 7.5 | 41.4 % | Sep 3, 2024 |
| CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability | 8.8 | 8.2 % | Sep 3, 2024 |
| CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 7.8 | 28.7 % | Sep 3, 2024 |
| CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 6.5 | 13.6 % | Sep 3, 2024 |
Added August 7, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-32113 | Apache OFBiz Path Traversal Vulnerability | 9.8 | 99.9 % | Aug 28, 2024 |
| CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability | 7.8 | 2.7 % | Aug 28, 2024 |
Added August 5, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 8.8 | 73.0 % | Aug 26, 2024 |