CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 621–630 of 1746 records

CVE Vendor Product Added Due Status
CVE-2020-13965 — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.
 Roundcube Webmail Jun 26, 2024 Jul 17, 2024
CVE-2022-24816 — OSGeo GeoServer JAI-EXT Code Injection Vulnerability
OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.
 OSGeo JAI-EXT Jun 26, 2024 Jul 17, 2024
CVE-2022-2586 — Linux Kernel Use-After-Free Vulnerability
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
 Linux Kernel Jun 26, 2024 Jul 17, 2024
CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
 Microsoft Windows Jun 13, 2024 Jul 4, 2024 Ransomware
CVE-2024-32896 — Android Pixel Privilege Escalation Vulnerability
Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.
 Android Pixel Jun 13, 2024 Jul 4, 2024
CVE-2024-4358 — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.
 Progress Telerik Report Server Jun 13, 2024 Jul 4, 2024
CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability
PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.
 PHP Group PHP Jun 12, 2024 Jul 3, 2024 Ransomware
CVE-2024-4610 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
 Arm Mali GPU Kernel Driver Jun 12, 2024 Jul 3, 2024
CVE-2017-3506 — Oracle WebLogic Server OS Command Injection Vulnerability
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.
 Oracle WebLogic Server Jun 3, 2024 Jun 24, 2024
CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability
Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.
 Linux Kernel May 30, 2024 Jun 20, 2024 Ransomware