Security Digest · page 8 of 8
Known exploited vulnerabilities (page 8)
Every CVE CISA has added to its Known Exploited Vulnerabilities catalog since October 1, 2023 (748), newest first. If you run the product, these come first. Browse by vendor.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2024-01-02 | CVE-2023-7024 | Google Chromium WebRTC Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 2024-01-23 |
| 2023-12-21 | CVE-2023-49897 | FXC AE1021, AE1021PE FXC AE1021, AE1021PE OS Command Injection Vulnerability | 2024-01-11 |
| 2023-12-21 | CVE-2023-47565 | QNAP VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability | 2024-01-11 |
| 2023-12-11 | CVE-2023-6448 | Unitronics Vision PLC and HMI Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 2023-12-18 |
| 2023-12-07 | CVE-2023-41266 | Qlik Sense Qlik Sense Path Traversal Vulnerability Ransomware | 2023-12-28 |
| 2023-12-07 | CVE-2023-41265 | Qlik Sense Qlik Sense HTTP Tunneling Vulnerability Ransomware | 2023-12-28 |
| 2023-12-05 | CVE-2023-33107 | Qualcomm Multiple Chipsets Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 2023-12-26 |
| 2023-12-05 | CVE-2023-33106 | Qualcomm Multiple Chipsets Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 2023-12-26 |
| 2023-12-05 | CVE-2023-33063 | Qualcomm Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-26 |
| 2023-12-05 | CVE-2022-22071 | Qualcomm Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-26 |
| 2023-12-04 | CVE-2023-42917 | Apple Multiple Products Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-12-25 |
| 2023-12-04 | CVE-2023-42916 | Apple Multiple Products Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-12-25 |
| 2023-11-30 | CVE-2023-6345 | Google Chromium Skia Google Skia Integer Overflow Vulnerability | 2023-12-21 |
| 2023-11-30 | CVE-2023-49103 | ownCloud ownCloud graphapi ownCloud graphapi Information Disclosure Vulnerability | 2023-12-21 |
| 2023-11-21 | CVE-2023-4911 | GNU GNU C Library GNU C Library Buffer Overflow Vulnerability | 2023-12-12 |
| 2023-11-16 | CVE-2023-36584 | Microsoft Windows Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2023-12-07 |
| 2023-11-16 | CVE-2023-1671 | Sophos Web Appliance Sophos Web Appliance Command Injection Vulnerability | 2023-12-07 |
| 2023-11-16 | CVE-2020-2551 | Oracle Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability | 2023-12-07 |
| 2023-11-14 | CVE-2023-36036 | Microsoft Windows Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 2023-12-05 |
| 2023-11-14 | CVE-2023-36033 | Microsoft Windows Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2023-12-05 |
| 2023-11-14 | CVE-2023-36025 | Microsoft Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-12-05 |
| 2023-11-13 | CVE-2023-47246 | SysAid SysAid Server SysAid Server Path Traversal Vulnerability Ransomware | 2023-12-04 |
| 2023-11-13 | CVE-2023-36851 | Juniper Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-17 |
| 2023-11-13 | CVE-2023-36847 | Juniper Junos OS Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 2023-11-17 |
| 2023-11-13 | CVE-2023-36846 | Juniper Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-17 |
| 2023-11-13 | CVE-2023-36845 | Juniper Junos OS Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 2023-11-17 |
| 2023-11-13 | CVE-2023-36844 | Juniper Junos OS Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 2023-11-17 |
| 2023-11-08 | CVE-2023-29552 | IETF Service Location Protocol (SLP) Service Location Protocol (SLP) Denial-of-Service Vulnerability | 2023-11-29 |
| 2023-11-07 | CVE-2023-22518 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Ransomware | 2023-11-28 |
| 2023-11-02 | CVE-2023-46604 | Apache ActiveMQ Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Ransomware | 2023-11-23 |
| 2023-10-31 | CVE-2023-46748 | F5 BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 2023-11-21 |
| 2023-10-31 | CVE-2023-46747 | F5 BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Ransomware | 2023-11-21 |
| 2023-10-26 | CVE-2023-5631 | Roundcube Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 2023-11-16 |
| 2023-10-23 | CVE-2023-20273 | Cisco Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability | 2023-10-27 |
| 2023-10-18 | CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Ransomware | 2023-11-08 |
| 2023-10-16 | CVE-2023-20198 | Cisco IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability | 2023-10-20 |
| 2023-10-10 | CVE-2023-44487 | IETF HTTP/2 HTTP/2 Rapid Reset Attack Vulnerability | 2023-10-31 |
| 2023-10-10 | CVE-2023-41763 | Microsoft Skype for Business Microsoft Skype for Business Privilege Escalation Vulnerability | 2023-10-31 |
| 2023-10-10 | CVE-2023-36563 | Microsoft WordPad Microsoft WordPad Information Disclosure Vulnerability | 2023-10-31 |
| 2023-10-10 | CVE-2023-21608 | Adobe Acrobat and Reader Adobe Acrobat and Reader Use-After-Free Vulnerability | 2023-10-31 |
| 2023-10-10 | CVE-2023-20109 | Cisco IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 2023-10-31 |
| 2023-10-05 | CVE-2023-42824 | Apple iOS and iPadOS Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 2023-10-26 |
| 2023-10-05 | CVE-2023-40044 | Progress WS_FTP Server Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Ransomware | 2023-10-26 |
| 2023-10-05 | CVE-2023-22515 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Ransomware | 2023-10-13 |
| 2023-10-04 | CVE-2023-42793 | JetBrains TeamCity JetBrains TeamCity Authentication Bypass Vulnerability Ransomware | 2023-10-25 |
| 2023-10-04 | CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2023-10-25 |
| 2023-10-03 | CVE-2023-4211 | Arm Mali GPU Kernel Driver Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2023-10-24 |
| 2023-10-02 | CVE-2023-5217 | Google Chromium libvpx Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2023-10-23 |