---
title: "Security digest: May 30, 2024"
url: https://erroneo.us/security/2024-05-30/
description: "May 30, 2024 vulnerability digest: 2 CISA KEV additions (Check Point, Linux); 3 critical advisories (Composer (PHP)). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2024-05-30
date_modified: 2024-05-30
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: May 30, 2024

2 known exploited (cisa kev) additions and 3 critical advisories.

## Take stock

- Do you run any of these? Check Point Quantum Security Gateways, Linux Kernel. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-06-20.
- Composer (PHP): 3 critical advisories ( titon/framework , symfony/symfony , typo3/cms-core ). Check with composer audit .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2024-24919](https://erroneo.us/security/cve/CVE-2024-24919/index.md) Check Point Quantum Security Gateways: Check Point Quantum Security Gateways Information Disclosure Vulnerability (CISA due 2024-06-20)
- [CVE-2024-1086](https://erroneo.us/security/cve/CVE-2024-1086/index.md) Linux Kernel: Linux Kernel Use-After-Free Vulnerability (CISA due 2024-06-20)

## Critical advisories

- [GHSA-q3jm-v27q-jfww](https://erroneo.us/security/ghsa/GHSA-q3jm-v27q-jfww/index.md) titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack — Composer (PHP) titon/framework <= 0.1.0-alpha → no fix
- [GHSA-mmcv-fvq8-r9x3](https://erroneo.us/security/ghsa/GHSA-mmcv-fvq8-r9x3/index.md) Symfony XML decoding attack vector through external entities — Composer (PHP) symfony/symfony >= 2.0.0, < 2.0.11 → 2.0.11
- [GHSA-cc97-g92w-jm65](https://erroneo.us/security/ghsa/GHSA-cc97-g92w-jm65/index.md) TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution — Composer (PHP) typo3/cms-core >= 8.0.0, < 8.7.17 → 8.7.17; Composer (PHP) typo3/cms-core >= 9.0.0, < 9.3.2 → 9.3.2; Composer (PHP) typo3/cms-core >= 7.0.0, < 7.6.30 → 7.6.30

---
Source page: https://erroneo.us/security/2024-05-30/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt