CISA added 9 new flaws to the Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3906 | Memory Corruption RCE in Microsoft Graphics Component (Actively Exploited) | — | 85% | KEV | — KEV |
| CVE-2014-1761 | Memory Corruption RCE in Microsoft Word | — | 78% | KEV | — KEV |
| CVE-2014-4404 | Heap-Based Buffer Overflow in Apple IOHIDFamily (OS X, iOS, Apple TV) | — | 49% | KEV | — KEV |
| CVE-2015-2051 | Remote Command Execution via HNAP GetDeviceSettings in D-Link DIR-645 Router | — | 97% | KEV | — KEV |
| CVE-2017-9841 | Unauthenticated Remote Code Execution in PHPUnit eval-stdin.php | 9.8 | 100% | KEV | KEV |
| CVE-2018-15982 | Use-After-Free in Adobe Flash Player Allows Arbitrary Code Execution | 7.8 | 90% | KEVRansomwarePoC | KEV |
| CVE-2018-20250 | Absolute Path Traversal in RARLAB WinRAR ACE Extraction (UNACEV2.dll) | 7.8 | 96% | KEVRansomwarePoC ×5 | KEV |
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-0752 | Type Confusion RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 82% | KEVRansomwarePoC | KEV |
| CVE-2020-0796 | Unauthenticated RCE in Microsoft SMBv3 (SMBGhost) | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-0609 | Use-After-Free in Google Chromium Animation Component (Chrome, Edge, Opera) | 8.8 | 22% | KEV | KEV |
| CVE-2022-24086 | Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento | 9.8 | 99% | KEV | KEV |
From the original article
3 min read at securityaffairs.com
The U. S. CISA added to the Known Exploited Vulnerabilities Catalog another 9 security flaws actively exploited in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.