U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-46690 | An out-of-bounds write issue was addressed with improved input validation | 7.8 | <1% | ||
| CVE-2023-20867 | Authentication Bypass in VMware Tools Lets Compromised ESXi Hosts Run Guest Operations | 3.9 | 14% | KEV | KEV |
| CVE-2023-20887 | Unauthenticated Command Injection RCE in VMware Aria Operations for Networks | 9.8 | 98% | KEVPoC | KEV |
| CVE-2023-27992 | Unauthenticated Command Injection in Zyxel NAS326, NAS540, NAS542 | 9.8 | 82% | KEV | KEV |
CVE-2023-2828+2 related CVEs | Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to… | 7.5 | 4% | ||
CVE-2023-32439+2 related CVEs | Type Confusion in Apple WebKit (Safari, iOS, iPadOS, macOS) Enables Code Execution | 8.8 group max | 24% | KEV | KEV |
From the original article
2 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.