Organizations Urged to Fix 41 Vulnerabilities Added to CISA’s Catalog of Exploited Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-0162 | Information Disclosure via JavaScript File Detection in Microsoft Internet Explorer | 4.3 | 22% | KEV | KEV |
| CVE-2020-0638 | Local Privilege Escalation in Microsoft Update Notification Manager (Windows 10/Server) | 7.8 | 2% | KEVRansomware | KEV |
CVE-2021-1048+1 related CVE | Use-After-Free Privilege Escalation in Android Kernel (CVE-2021-1048) | 7.8 group max | 1% | KEV | KEV |
| CVE-2022-20821 | Unauthenticated Redis Access via Open TCP 6379 in Cisco IOS XR Health Check RPM | 6.5 | 11% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
The Cybersecurity and Infrastructure Security Agency (CISA) has added 41 vulnerabilities to its catalog of known exploited flaws this week. The US federal agency has urged all organizations to remediate these vulnerabilities promptly to “reduce their exposure to cyber-attacks."
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.