CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-0556 | Code Injection RCE in Microsoft Office PowerPoint via Malformed File | — | 67% | KEV | — KEV |
| CVE-2025-37164 | Unauthenticated Remote Code Execution in HPE OneView | 9.8 | 90% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 08, 2026 Vulnerability / KEV Catalog The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting Microsoft Office and Hewlett Packard Enterprise (HPE) OneView to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.