CISA Known Exploited Vulnerabilities
KEV additions — October 2024
17 CVEs entered the KEV catalog in October 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added October 24, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service Vulnerability | 5.8 | 15.9 % | Nov 14, 2024 |
| CVE-2024-37383 | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 73.3 % | Nov 14, 2024 |
Added October 23, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication Vulnerability | 9.8 | 94.8 % | Nov 13, 2024 |
Added October 22, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38094ransomware | Microsoft SharePoint Deserialization Vulnerability | 7.2 | 50.9 % | Nov 12, 2024 |
Added October 21, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-9537 | ScienceLogic SL1 Unspecified Vulnerability | 9.8 | 3.8 % | Nov 11, 2024 |
Added October 17, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-40711ransomware | Veeam Backup and Replication Deserialization Vulnerability | — | 90.4 % | Nov 7, 2024 |
Added October 15, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 9.1 | 93.3 % | Nov 5, 2024 |
| CVE-2024-30088ransomware | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 7 | 68.2 % | Nov 5, 2024 |
| CVE-2024-9680ransomware | Mozilla Firefox Use-After-Free Vulnerability | 9.8 | 23.2 % | Nov 5, 2024 |
Added October 9, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23113 | Fortinet Multiple Products Format String Vulnerability | 9.8 | 61.7 % | Oct 30, 2024 |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 7.2 | 43.8 % | Oct 30, 2024 |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 7.2 | 59.7 % | Oct 30, 2024 |
Added October 8, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-43047 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.7 % | Oct 29, 2024 |
| CVE-2024-43572 | Microsoft Windows Management Console Remote Code Execution Vulnerability | 7.8 | 66.7 % | Oct 29, 2024 |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 8.1 | 46.1 % | Oct 29, 2024 |
Added October 3, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 9.8 | 99.9 % | Oct 24, 2024 |
Added October 2, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 8.8 | 99.9 % | Oct 23, 2024 |