CISA adds Stuxnet bug to Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-2568 | Remote Code Execution in Microsoft Windows via Malicious Shortcut (LNK) Parsing | — | 90% | KEV | — KEV |
| CVE-2013-2094 | Out-of-Bounds Access in Linux Kernel perf Events Enables Privilege Escalation | — | 48% | KEV | — KEV |
| CVE-2013-2596 | Integer Overflow in Linux Kernel fb_mmap Enables Privilege Escalation | — | 3% | KEV | — KEV |
| CVE-2013-2597 | Stack Buffer Overflow in Code Aurora ACDB Audio Driver Enables Privilege Escalation | — | 2% | KEV | — KEV |
| CVE-2013-6282 | Improper Input Validation in Linux Kernel on ARM Enables Privilege Escalation | — | 40% | KEV | — KEV |
| CVE-2022-40139 | Improper Validation RCE via Rollback Mechanism in Trend Micro Apex One Clients | 7.2 | 3% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including the bug used in the Stuxnet attacks.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.