---
title: "Known exploited vulnerabilities (page 7)"
url: https://erroneo.us/security/kev/7/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 7 of 8."
type: kev
section: "Security Digest"
date_modified: 2024-08-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities (page 7)

- 2024-08-21 [CVE-2021-33045](https://erroneo.us/security/cve/CVE-2021-33045/index.md) Dahua IP Camera Firmware: Dahua IP Camera Authentication Bypass Vulnerability (due 2024-09-11; ransomware: Unknown)
- 2024-08-21 [CVE-2021-33044](https://erroneo.us/security/cve/CVE-2021-33044/index.md) Dahua IP Camera Firmware: Dahua IP Camera Authentication Bypass Vulnerability (due 2024-09-11; ransomware: Unknown)
- 2024-08-21 [CVE-2021-31196](https://erroneo.us/security/cve/CVE-2021-31196/index.md) Microsoft Exchange Server: Microsoft Exchange Server Information Disclosure Vulnerability (due 2024-09-11; ransomware: Unknown)
- 2024-08-19 [CVE-2024-23897](https://erroneo.us/security/cve/CVE-2024-23897/index.md) Jenkins Jenkins Command Line Interface (CLI): Jenkins Command Line Interface (CLI) Path Traversal Vulnerability (due 2024-09-09; ransomware: Known)
- 2024-08-15 [CVE-2024-28986](https://erroneo.us/security/cve/CVE-2024-28986/index.md) SolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (due 2024-09-05; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38213](https://erroneo.us/security/cve/CVE-2024-38213/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2024-09-03; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38193](https://erroneo.us/security/cve/CVE-2024-38193/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38189](https://erroneo.us/security/cve/CVE-2024-38189/index.md) Microsoft Project: Microsoft Project Remote Code Execution Vulnerability  (due 2024-09-03; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38178](https://erroneo.us/security/cve/CVE-2024-38178/index.md) Microsoft Windows: Microsoft Windows Scripting Engine Memory Corruption Vulnerability (due 2024-09-03; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38107](https://erroneo.us/security/cve/CVE-2024-38107/index.md) Microsoft Windows: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown)
- 2024-08-13 [CVE-2024-38106](https://erroneo.us/security/cve/CVE-2024-38106/index.md) Microsoft Windows: Microsoft Windows Kernel Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown)
- 2024-08-07 [CVE-2024-36971](https://erroneo.us/security/cve/CVE-2024-36971/index.md) Android Kernel: Android Kernel Remote Code Execution Vulnerability (due 2024-08-28; ransomware: Unknown)
- 2024-08-07 [CVE-2024-32113](https://erroneo.us/security/cve/CVE-2024-32113/index.md) Apache OFBiz: Apache OFBiz Path Traversal Vulnerability (due 2024-08-28; ransomware: Unknown)
- 2024-08-05 [CVE-2018-0824](https://erroneo.us/security/cve/CVE-2018-0824/index.md) Microsoft Windows: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability (due 2024-08-26; ransomware: Unknown)
- 2024-07-30 [CVE-2024-37085](https://erroneo.us/security/cve/CVE-2024-37085/index.md) VMware ESXi: VMware ESXi Authentication Bypass Vulnerability (due 2024-08-20; ransomware: Known)
- 2024-07-29 [CVE-2024-5217](https://erroneo.us/security/cve/CVE-2024-5217/index.md) ServiceNow Utah, Vancouver, and Washington DC Now Platform: ServiceNow Incomplete List of Disallowed Inputs Vulnerability (due 2024-08-19; ransomware: Unknown)
- 2024-07-29 [CVE-2024-4879](https://erroneo.us/security/cve/CVE-2024-4879/index.md) ServiceNow Utah, Vancouver, and Washington DC Now Platform: ServiceNow Improper Input Validation Vulnerability (due 2024-08-19; ransomware: Unknown)
- 2024-07-29 [CVE-2023-45249](https://erroneo.us/security/cve/CVE-2023-45249/index.md) Acronis Cyber Infrastructure (ACI): Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability (due 2024-08-19; ransomware: Unknown)
- 2024-07-23 [CVE-2024-39891](https://erroneo.us/security/cve/CVE-2024-39891/index.md) Twilio Authy: Twilio Authy Information Disclosure Vulnerability (due 2024-08-13; ransomware: Unknown)
- 2024-07-23 [CVE-2012-4792](https://erroneo.us/security/cve/CVE-2012-4792/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2024-08-13; ransomware: Unknown)
- 2024-07-17 [CVE-2024-34102](https://erroneo.us/security/cve/CVE-2024-34102/index.md) Adobe Commerce and Magento Open Source: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability (due 2024-08-07; ransomware: Unknown)
- 2024-07-17 [CVE-2024-28995](https://erroneo.us/security/cve/CVE-2024-28995/index.md) SolarWinds Serv-U: SolarWinds Serv-U Path Traversal Vulnerability  (due 2024-08-07; ransomware: Unknown)
- 2024-07-17 [CVE-2022-22948](https://erroneo.us/security/cve/CVE-2022-22948/index.md) VMware vCenter Server: VMware vCenter Server Incorrect Default File Permissions Vulnerability  (due 2024-08-07; ransomware: Unknown)
- 2024-07-15 [CVE-2024-36401](https://erroneo.us/security/cve/CVE-2024-36401/index.md) OSGeo GeoServer: OSGeo GeoServer GeoTools Eval Injection Vulnerability (due 2024-08-05; ransomware: Unknown)
- 2024-07-09 [CVE-2024-38112](https://erroneo.us/security/cve/CVE-2024-38112/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-07-30; ransomware: Unknown)
- 2024-07-09 [CVE-2024-38080](https://erroneo.us/security/cve/CVE-2024-38080/index.md) Microsoft Windows : Microsoft Windows Hyper-V Privilege Escalation Vulnerability (due 2024-07-30; ransomware: Unknown)
- 2024-07-09 [CVE-2024-23692](https://erroneo.us/security/cve/CVE-2024-23692/index.md) Rejetto HTTP File Server: Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (due 2024-07-30; ransomware: Known)
- 2024-07-02 [CVE-2024-20399](https://erroneo.us/security/cve/CVE-2024-20399/index.md) Cisco NX-OS: Cisco NX-OS Command Injection Vulnerability (due 2024-07-23; ransomware: Unknown)
- 2024-06-26 [CVE-2022-2586](https://erroneo.us/security/cve/CVE-2022-2586/index.md) Linux Kernel: Linux Kernel Use-After-Free Vulnerability (due 2024-07-17; ransomware: Unknown)
- 2024-06-26 [CVE-2022-24816](https://erroneo.us/security/cve/CVE-2022-24816/index.md) OSGeo JAI-EXT: OSGeo GeoServer JAI-EXT Code Injection Vulnerability (due 2024-07-17; ransomware: Unknown)
- 2024-06-26 [CVE-2020-13965](https://erroneo.us/security/cve/CVE-2020-13965/index.md) Roundcube Webmail: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability (due 2024-07-17; ransomware: Unknown)
- 2024-06-13 [CVE-2024-4358](https://erroneo.us/security/cve/CVE-2024-4358/index.md) Progress Telerik Report Server: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability (due 2024-07-04; ransomware: Unknown)
- 2024-06-13 [CVE-2024-32896](https://erroneo.us/security/cve/CVE-2024-32896/index.md) Android Pixel: Android Pixel Privilege Escalation Vulnerability (due 2024-07-04; ransomware: Unknown)
- 2024-06-13 [CVE-2024-26169](https://erroneo.us/security/cve/CVE-2024-26169/index.md) Microsoft Windows: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability (due 2024-07-04; ransomware: Known)
- 2024-06-12 [CVE-2024-4610](https://erroneo.us/security/cve/CVE-2024-4610/index.md) Arm Mali GPU Kernel Driver: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (due 2024-07-03; ransomware: Unknown)
- 2024-06-12 [CVE-2024-4577](https://erroneo.us/security/cve/CVE-2024-4577/index.md) PHP Group PHP: PHP-CGI OS Command Injection Vulnerability (due 2024-07-03; ransomware: Known)
- 2024-06-03 [CVE-2017-3506](https://erroneo.us/security/cve/CVE-2017-3506/index.md) Oracle WebLogic Server: Oracle WebLogic Server OS Command Injection Vulnerability (due 2024-06-24; ransomware: Unknown)
- 2024-05-30 [CVE-2024-24919](https://erroneo.us/security/cve/CVE-2024-24919/index.md) Check Point Quantum Security Gateways: Check Point Quantum Security Gateways Information Disclosure Vulnerability (due 2024-06-20; ransomware: Known)
- 2024-05-30 [CVE-2024-1086](https://erroneo.us/security/cve/CVE-2024-1086/index.md) Linux Kernel: Linux Kernel Use-After-Free Vulnerability (due 2024-06-20; ransomware: Known)
- 2024-05-29 [CVE-2024-4978](https://erroneo.us/security/cve/CVE-2024-4978/index.md) Justice AV Solutions Viewer : Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability (due 2024-06-19; ransomware: Unknown)
- 2024-05-28 [CVE-2024-5274](https://erroneo.us/security/cve/CVE-2024-5274/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2024-06-18; ransomware: Unknown)
- 2024-05-23 [CVE-2020-17519](https://erroneo.us/security/cve/CVE-2020-17519/index.md) Apache Flink: Apache Flink Improper Access Control Vulnerability (due 2024-06-13; ransomware: Unknown)
- 2024-05-20 [CVE-2024-4947](https://erroneo.us/security/cve/CVE-2024-4947/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2024-06-10; ransomware: Unknown)
- 2024-05-20 [CVE-2023-43208](https://erroneo.us/security/cve/CVE-2023-43208/index.md) NextGen Healthcare Mirth Connect: NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability (due 2024-06-10; ransomware: Known)
- 2024-05-16 [CVE-2024-4761](https://erroneo.us/security/cve/CVE-2024-4761/index.md) Google Chromium V8: Google Chromium V8 Out-of-Bounds Memory Write Vulnerability (due 2024-06-06; ransomware: Unknown)
- 2024-05-16 [CVE-2021-40655](https://erroneo.us/security/cve/CVE-2021-40655/index.md) D-Link DIR-605 Router: D-Link DIR-605 Router Information Disclosure Vulnerability (due 2024-06-06; ransomware: Unknown)
- 2024-05-16 [CVE-2014-100005](https://erroneo.us/security/cve/CVE-2014-100005/index.md) D-Link DIR-600 Router: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability (due 2024-06-06; ransomware: Unknown)
- 2024-05-14 [CVE-2024-30051](https://erroneo.us/security/cve/CVE-2024-30051/index.md) Microsoft DWM Core Library:  Microsoft DWM Core Library Privilege Escalation Vulnerability (due 2024-06-04; ransomware: Known)
- 2024-05-14 [CVE-2024-30040](https://erroneo.us/security/cve/CVE-2024-30040/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability (due 2024-06-04; ransomware: Unknown)
- 2024-05-13 [CVE-2024-4671](https://erroneo.us/security/cve/CVE-2024-4671/index.md) Google Chromium: Google Chromium Visuals Use-After-Free Vulnerability (due 2024-06-03; ransomware: Unknown)
- 2024-05-01 [CVE-2023-7028](https://erroneo.us/security/cve/CVE-2023-7028/index.md) GitLab GitLab CE/EE: GitLab Community and Enterprise Editions Improper Access Control Vulnerability (due 2024-05-22; ransomware: Unknown)
- 2024-04-30 [CVE-2024-29988](https://erroneo.us/security/cve/CVE-2024-29988/index.md) Microsoft SmartScreen Prompt: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability (due 2024-05-21; ransomware: Unknown)
- 2024-04-24 [CVE-2024-4040](https://erroneo.us/security/cve/CVE-2024-4040/index.md) CrushFTP CrushFTP: CrushFTP VFS Sandbox Escape Vulnerability (due 2024-05-01; ransomware: Unknown)
- 2024-04-24 [CVE-2024-20359](https://erroneo.us/security/cve/CVE-2024-20359/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Privilege Escalation Vulnerability (due 2024-05-01; ransomware: Unknown)
- 2024-04-24 [CVE-2024-20353](https://erroneo.us/security/cve/CVE-2024-20353/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Denial of Service Vulnerability (due 2024-05-01; ransomware: Unknown)
- 2024-04-23 [CVE-2022-38028](https://erroneo.us/security/cve/CVE-2022-38028/index.md) Microsoft Windows: Microsoft Windows Print Spooler Privilege Escalation Vulnerability  (due 2024-05-14; ransomware: Unknown)
- 2024-04-12 [CVE-2024-3400](https://erroneo.us/security/cve/CVE-2024-3400/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Command Injection Vulnerability (due 2024-04-19; ransomware: Known)
- 2024-04-11 [CVE-2024-3273](https://erroneo.us/security/cve/CVE-2024-3273/index.md) D-Link Multiple NAS Devices: D-Link Multiple NAS Devices Command Injection Vulnerability (due 2024-05-02; ransomware: Unknown)
- 2024-04-11 [CVE-2024-3272](https://erroneo.us/security/cve/CVE-2024-3272/index.md) D-Link Multiple NAS Devices: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability (due 2024-05-02; ransomware: Unknown)
- 2024-04-04 [CVE-2024-29748](https://erroneo.us/security/cve/CVE-2024-29748/index.md) Android Pixel: Android Pixel Privilege Escalation Vulnerability (due 2024-04-25; ransomware: Unknown)
- 2024-04-04 [CVE-2024-29745](https://erroneo.us/security/cve/CVE-2024-29745/index.md) Android Pixel: Android Pixel Information Disclosure Vulnerability (due 2024-04-25; ransomware: Unknown)
- 2024-03-26 [CVE-2023-24955](https://erroneo.us/security/cve/CVE-2023-24955/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Code Injection Vulnerability (due 2024-04-16; ransomware: Known)
- 2024-03-25 [CVE-2023-48788](https://erroneo.us/security/cve/CVE-2023-48788/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability (due 2024-04-15; ransomware: Known)
- 2024-03-25 [CVE-2021-44529](https://erroneo.us/security/cve/CVE-2021-44529/index.md) Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA): Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability  (due 2024-04-15; ransomware: Known)
- 2024-03-25 [CVE-2019-7256](https://erroneo.us/security/cve/CVE-2019-7256/index.md) Nice Linear eMerge E3-Series: Nice Linear eMerge E3-Series OS Command Injection Vulnerability (due 2024-04-15; ransomware: Unknown)
- 2024-03-07 [CVE-2024-27198](https://erroneo.us/security/cve/CVE-2024-27198/index.md) JetBrains TeamCity: JetBrains TeamCity Authentication Bypass Vulnerability (due 2024-03-28; ransomware: Known)
- 2024-03-06 [CVE-2024-23296](https://erroneo.us/security/cve/CVE-2024-23296/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-03-27; ransomware: Unknown)
- 2024-03-06 [CVE-2024-23225](https://erroneo.us/security/cve/CVE-2024-23225/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-03-27; ransomware: Unknown)
- 2024-03-05 [CVE-2023-21237](https://erroneo.us/security/cve/CVE-2023-21237/index.md) Android Pixel: Android Pixel Information Disclosure Vulnerability  (due 2024-03-26; ransomware: Unknown)
- 2024-03-05 [CVE-2021-36380](https://erroneo.us/security/cve/CVE-2021-36380/index.md) Sunhillo SureLine: Sunhillo SureLine OS Command Injection Vulnerablity (due 2024-03-26; ransomware: Unknown)
- 2024-03-04 [CVE-2024-21338](https://erroneo.us/security/cve/CVE-2024-21338/index.md) Microsoft Windows: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability (due 2024-03-25; ransomware: Known)
- 2024-02-29 [CVE-2023-29360](https://erroneo.us/security/cve/CVE-2023-29360/index.md) Microsoft Streaming Service: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability (due 2024-03-21; ransomware: Unknown)
- 2024-02-22 [CVE-2024-1709](https://erroneo.us/security/cve/CVE-2024-1709/index.md) ConnectWise ScreenConnect: ConnectWise ScreenConnect Authentication Bypass Vulnerability (due 2024-02-29; ransomware: Known)
- 2024-02-15 [CVE-2024-21410](https://erroneo.us/security/cve/CVE-2024-21410/index.md) Microsoft Exchange Server: Microsoft Exchange Server Privilege Escalation Vulnerability (due 2024-03-07; ransomware: Unknown)
- 2024-02-15 [CVE-2020-3259](https://erroneo.us/security/cve/CVE-2020-3259/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Information Disclosure Vulnerability (due 2024-03-07; ransomware: Known)
- 2024-02-13 [CVE-2024-21412](https://erroneo.us/security/cve/CVE-2024-21412/index.md) Microsoft Windows: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability (due 2024-03-05; ransomware: Known)
- 2024-02-13 [CVE-2024-21351](https://erroneo.us/security/cve/CVE-2024-21351/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2024-03-05; ransomware: Unknown)
- 2024-02-12 [CVE-2023-43770](https://erroneo.us/security/cve/CVE-2023-43770/index.md) Roundcube Webmail: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (due 2024-03-04; ransomware: Unknown)
- 2024-02-09 [CVE-2024-21762](https://erroneo.us/security/cve/CVE-2024-21762/index.md) Fortinet FortiOS: Fortinet FortiOS Out-of-Bound Write Vulnerability (due 2024-02-16; ransomware: Known)
- 2024-02-06 [CVE-2023-4762](https://erroneo.us/security/cve/CVE-2023-4762/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2024-02-27; ransomware: Unknown)
- 2024-01-31 [CVE-2024-21893](https://erroneo.us/security/cve/CVE-2024-21893/index.md) Ivanti Connect Secure, Policy Secure, and Neurons: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability (due 2024-02-02; ransomware: Known)
- 2024-01-31 [CVE-2022-48618](https://erroneo.us/security/cve/CVE-2022-48618/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-02-21; ransomware: Unknown)
- 2024-01-24 [CVE-2023-22527](https://erroneo.us/security/cve/CVE-2023-22527/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Template Injection Vulnerability (due 2024-02-14; ransomware: Known)
- 2024-01-23 [CVE-2024-23222](https://erroneo.us/security/cve/CVE-2024-23222/index.md) Apple Multiple Products: Apple Multiple Products WebKit Type Confusion Vulnerability (due 2024-02-13; ransomware: Unknown)
- 2024-01-22 [CVE-2023-34048](https://erroneo.us/security/cve/CVE-2023-34048/index.md) VMware vCenter Server: VMware vCenter Server Out-of-Bounds Write Vulnerability (due 2024-02-12; ransomware: Unknown)
- 2024-01-18 [CVE-2023-35082](https://erroneo.us/security/cve/CVE-2023-35082/index.md) Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability (due 2024-02-08; ransomware: Known)
- 2024-01-17 [CVE-2024-0519](https://erroneo.us/security/cve/CVE-2024-0519/index.md) Google Chromium V8: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability (due 2024-02-07; ransomware: Unknown)
- 2024-01-17 [CVE-2023-6549](https://erroneo.us/security/cve/CVE-2023-6549/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (due 2024-02-07; ransomware: Unknown)
- 2024-01-17 [CVE-2023-6548](https://erroneo.us/security/cve/CVE-2023-6548/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (due 2024-01-24; ransomware: Unknown)
- 2024-01-16 [CVE-2018-15133](https://erroneo.us/security/cve/CVE-2018-15133/index.md) Laravel Laravel Framework: Laravel Deserialization of Untrusted Data Vulnerability (due 2024-02-06; ransomware: Unknown)
- 2024-01-10 [CVE-2024-21887](https://erroneo.us/security/cve/CVE-2024-21887/index.md) Ivanti Connect Secure and Policy Secure: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (due 2024-01-22; ransomware: Known)
- 2024-01-10 [CVE-2023-46805](https://erroneo.us/security/cve/CVE-2023-46805/index.md) Ivanti Connect Secure and Policy Secure: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (due 2024-01-22; ransomware: Known)
- 2024-01-10 [CVE-2023-29357](https://erroneo.us/security/cve/CVE-2023-29357/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Privilege Escalation Vulnerability (due 2024-01-31; ransomware: Known)
- 2024-01-08 [CVE-2023-41990](https://erroneo.us/security/cve/CVE-2023-41990/index.md) Apple Multiple Products: Apple Multiple Products Code Execution Vulnerability (due 2024-01-29; ransomware: Unknown)
- 2024-01-08 [CVE-2023-38203](https://erroneo.us/security/cve/CVE-2023-38203/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (due 2024-01-29; ransomware: Known)
- 2024-01-08 [CVE-2023-29300](https://erroneo.us/security/cve/CVE-2023-29300/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (due 2024-01-29; ransomware: Known)
- 2024-01-08 [CVE-2023-27524](https://erroneo.us/security/cve/CVE-2023-27524/index.md) Apache Superset: Apache Superset Insecure Default Initialization of Resource Vulnerability (due 2024-01-29; ransomware: Unknown)
- 2024-01-08 [CVE-2023-23752](https://erroneo.us/security/cve/CVE-2023-23752/index.md) Joomla! Joomla!: Joomla! Improper Access Control Vulnerability (due 2024-01-29; ransomware: Unknown)
- 2024-01-08 [CVE-2016-20017](https://erroneo.us/security/cve/CVE-2016-20017/index.md) D-Link DSL-2750B Devices: D-Link DSL-2750B Devices Command Injection Vulnerability (due 2024-01-29; ransomware: Unknown)
- 2024-01-02 [CVE-2023-7101](https://erroneo.us/security/cve/CVE-2023-7101/index.md) Spreadsheet::ParseExcel Spreadsheet::ParseExcel: Spreadsheet::ParseExcel Remote Code Execution Vulnerability (due 2024-01-23; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/7/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt