CISA adds 41 flaws to its Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-0162 | Information Disclosure via JavaScript File Detection in Microsoft Internet Explorer | 4.3 | 22% | KEV | KEV |
| CVE-2016-3298 | Information Disclosure in Microsoft Internet Explorer Messaging API | 6.5 | 33% | KEV | KEV |
| CVE-2016-3351 | Information Disclosure in Microsoft Internet Explorer and Edge | 6.5 | 26% | KEVRansomwarePoC | KEV |
CVE-2016-4657+2 related CVEs | Memory Corruption RCE in Apple iOS WebKit (CVE-2016-4657) | 8.8 group max | 67% | KEVPoC ×2 | KEV |
CVE-2016-6366+1 related CVE | SNMP Buffer Overflow RCE (EXTRABACON) in Cisco ASA, PIX, and FWSM Firewalls | 8.8 group max | 88% | KEVPoC ×3 | KEV |
CVE-2021-1048+1 related CVE | Use-After-Free Privilege Escalation in Android Kernel (CVE-2021-1048) | 7.8 group max | 1% | KEV | KEV |
| CVE-2022-20821 | Unauthenticated Redis Access via Open TCP 6379 in Cisco IOS XR Health Check RPM | 6.5 | 11% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
US Critical Infrastructure Security Agency (CISA) adds 41 new vulnerabilities to its Known Exploited Vulnerabilities Catalog. The Cybersecurity & Infrastructure Security Agency (CISA) has added 41 flaws to its Known Exploited Vulnerabilities Catalog, including recently addressed issues in the Android kernel ( CVE-2021-1048 and CVE-2021-0920) and Cisco IOS XR ( CVE-2022-20821 ).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.