CISA tells agencies to patch recent Windows 10 zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-4102 | Use-After-Free Zero-Day in Google Chrome's V8 JavaScript Engine | 8.8 | 8% | KEV | KEV |
| CVE-2021-43890 | Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited | 7.1 | 11% | KEVRansomwarePoC | KEV |
From the original article
1 min read at therecord.media
CISA has ordered federal civilian agencies to patch two zero-days disclosed this week in products like Google Chrome and Windows 10. The urgency comes as the two vulnerabilities have already been exploited even before Google and Microsoft released patches on Monday and Tuesday , respectively.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.