Exploit / PoCcriticalExploited in the wild

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

The Hacker Newsby @TheHackersNewsApr 24, 2023 · 04:36 UTC (Apr 24, 2023)2 min read2

Read at thehackernews.com

Analyze CVE-2023-28432 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28432 CVE-2023-27350 CVE-2023-2136

Tags: cve-2023-28432 cve-2023-27350 cve-2023-2136 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-2136	Skia Integer Overflow Sandbox Escape in Google Chrome	9.6	6%	KEV	Apr 19, 2023 KEV Apr 21, 2023
CVE-2023-27350	Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG	9.8	100%	KEVRansomwarePoC ×3	Apr 20, 2023 KEV Apr 21, 2023
CVE-2023-28432	Unauthenticated Information Disclosure in MinIO Object Storage Clusters	7.5	84%	KEVPoC	Mar 22, 2023 KEV Apr 21, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 22, 2023 Patch Management / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.