Google Chrome, D-Link bugs among twelve added to CISA’s list of known exploited vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-2628 | Unauthenticated Java Deserialization RCE in Oracle WebLogic Server via T3 | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2020-9934 | Environment Variable Handling Information Disclosure in Apple iOS, iPadOS, and macOS | 5.5 | 3% | KEV | KEV |
| CVE-2022-3075 | Actively Exploited Sandbox Escape via Insufficient Mojo Validation in Google Chrome | 9.6 | 6% | KEV | KEV |
From the original article
4 min read at therecord.media
The Cybersecurity and Infrastructure Security Agency (CISA) added twelve vulnerabilities to its catalog of known exploited bugs this week, highlighting several issues found in Google Chrome as well as tools from QNAP, D-Link, Apple, Oracle and more. Federal civilian agencies have until September 29 to patch the vulnerabilities and as with all additions to the list , CISA said there is evidence of active exploitation.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.