AdvisorycriticalExploited in the wild

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

The Hacker Newsby @TheHackersNewsApr 11, 2023 · 04:30 UTC (Apr 11, 2023)2 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-27876 CVE-2021-27877 CVE-2021-27878 CVE-2019-1388 CVE-2023-26083 CVE-2023-28205 CVE-2023-28206

Tags: cve-2021-27876 cve-2021-27877 cve-2021-27878 cve-2019-1388 cve-2023-26083 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-1388	Local Privilege Escalation in Microsoft Windows Certificate Dialog (CVE-2019-1388)	7.8	9%	KEVRansomware	Nov 12, 2019 KEV Apr 7, 2023
CVE-2021-27877 +2 related CVEs CVE-2021-27878 CVE-2021-27876	Unauthenticated RCE in Veritas Backup Exec Agent via Legacy SHA Authentication	9.8 group max	65%	KEVRansomwarePoC	Mar 1, 2021 KEV Apr 7, 2023
CVE-2023-26083	Memory Leak Information Disclosure in Arm Mali GPU Kernel Drivers	3.3	1%	KEV	Apr 6, 2023 KEV Apr 7, 2023
CVE-2023-28205	Use-After-Free in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution	8.8	27%	KEV	Apr 10, 2023 KEV Apr 10, 2023
CVE-2023-28206	Out-of-Bounds Write in Apple IOSurfaceAccelerator Allows Kernel-Level Code Execution	8.6	23%	KEV	Apr 10, 2023 KEV Apr 10, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 10, 2023 Software Security / Cyber Threat The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.