---
title: "Known exploited vulnerabilities (page 8)"
url: https://erroneo.us/security/kev/8/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 8 of 8."
type: kev
section: "Security Digest"
date_modified: 2024-01-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities (page 8)

- 2024-01-02 [CVE-2023-7024](https://erroneo.us/security/cve/CVE-2023-7024/index.md) Google Chromium WebRTC: Google Chromium WebRTC Heap Buffer Overflow Vulnerability (due 2024-01-23; ransomware: Unknown)
- 2023-12-21 [CVE-2023-49897](https://erroneo.us/security/cve/CVE-2023-49897/index.md) FXC AE1021, AE1021PE: FXC AE1021, AE1021PE OS Command Injection Vulnerability (due 2024-01-11; ransomware: Unknown)
- 2023-12-21 [CVE-2023-47565](https://erroneo.us/security/cve/CVE-2023-47565/index.md) QNAP VioStor NVR: QNAP VioStor NVR OS Command Injection Vulnerability (due 2024-01-11; ransomware: Unknown)
- 2023-12-11 [CVE-2023-6448](https://erroneo.us/security/cve/CVE-2023-6448/index.md) Unitronics Vision PLC and HMI: Unitronics Vision PLC and HMI Insecure Default Password Vulnerability (due 2023-12-18; ransomware: Unknown)
- 2023-12-07 [CVE-2023-41266](https://erroneo.us/security/cve/CVE-2023-41266/index.md) Qlik Sense: Qlik Sense Path Traversal Vulnerability (due 2023-12-28; ransomware: Known)
- 2023-12-07 [CVE-2023-41265](https://erroneo.us/security/cve/CVE-2023-41265/index.md) Qlik Sense: Qlik Sense HTTP Tunneling Vulnerability (due 2023-12-28; ransomware: Known)
- 2023-12-05 [CVE-2023-33107](https://erroneo.us/security/cve/CVE-2023-33107/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Integer Overflow Vulnerability (due 2023-12-26; ransomware: Unknown)
- 2023-12-05 [CVE-2023-33106](https://erroneo.us/security/cve/CVE-2023-33106/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability (due 2023-12-26; ransomware: Unknown)
- 2023-12-05 [CVE-2023-33063](https://erroneo.us/security/cve/CVE-2023-33063/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability (due 2023-12-26; ransomware: Unknown)
- 2023-12-05 [CVE-2022-22071](https://erroneo.us/security/cve/CVE-2022-22071/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability (due 2023-12-26; ransomware: Unknown)
- 2023-12-04 [CVE-2023-42917](https://erroneo.us/security/cve/CVE-2023-42917/index.md) Apple Multiple Products: Apple Multiple Products WebKit Memory Corruption Vulnerability (due 2023-12-25; ransomware: Unknown)
- 2023-12-04 [CVE-2023-42916](https://erroneo.us/security/cve/CVE-2023-42916/index.md) Apple Multiple Products: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (due 2023-12-25; ransomware: Unknown)
- 2023-11-30 [CVE-2023-6345](https://erroneo.us/security/cve/CVE-2023-6345/index.md) Google Chromium Skia: Google Skia Integer Overflow Vulnerability (due 2023-12-21; ransomware: Unknown)
- 2023-11-30 [CVE-2023-49103](https://erroneo.us/security/cve/CVE-2023-49103/index.md) ownCloud ownCloud graphapi: ownCloud graphapi Information Disclosure Vulnerability (due 2023-12-21; ransomware: Unknown)
- 2023-11-21 [CVE-2023-4911](https://erroneo.us/security/cve/CVE-2023-4911/index.md) GNU GNU C Library: GNU C Library Buffer Overflow Vulnerability (due 2023-12-12; ransomware: Unknown)
- 2023-11-16 [CVE-2023-36584](https://erroneo.us/security/cve/CVE-2023-36584/index.md) Microsoft Windows: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (due 2023-12-07; ransomware: Unknown)
- 2023-11-16 [CVE-2023-1671](https://erroneo.us/security/cve/CVE-2023-1671/index.md) Sophos Web Appliance: Sophos Web Appliance Command Injection Vulnerability (due 2023-12-07; ransomware: Unknown)
- 2023-11-16 [CVE-2020-2551](https://erroneo.us/security/cve/CVE-2020-2551/index.md) Oracle Fusion Middleware: Oracle Fusion Middleware Unspecified Vulnerability (due 2023-12-07; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36036](https://erroneo.us/security/cve/CVE-2023-36036/index.md) Microsoft Windows: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36033](https://erroneo.us/security/cve/CVE-2023-36033/index.md) Microsoft Windows: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36025](https://erroneo.us/security/cve/CVE-2023-36025/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-11-13 [CVE-2023-47246](https://erroneo.us/security/cve/CVE-2023-47246/index.md) SysAid SysAid Server: SysAid Server Path Traversal Vulnerability (due 2023-12-04; ransomware: Known)
- 2023-11-13 [CVE-2023-36851](https://erroneo.us/security/cve/CVE-2023-36851/index.md) Juniper Junos OS: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (due 2023-11-17; ransomware: Unknown)
- 2023-11-13 [CVE-2023-36847](https://erroneo.us/security/cve/CVE-2023-36847/index.md) Juniper Junos OS: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability (due 2023-11-17; ransomware: Unknown)
- 2023-11-13 [CVE-2023-36846](https://erroneo.us/security/cve/CVE-2023-36846/index.md) Juniper Junos OS: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (due 2023-11-17; ransomware: Unknown)
- 2023-11-13 [CVE-2023-36845](https://erroneo.us/security/cve/CVE-2023-36845/index.md) Juniper Junos OS: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability (due 2023-11-17; ransomware: Unknown)
- 2023-11-13 [CVE-2023-36844](https://erroneo.us/security/cve/CVE-2023-36844/index.md) Juniper Junos OS: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability (due 2023-11-17; ransomware: Unknown)
- 2023-11-08 [CVE-2023-29552](https://erroneo.us/security/cve/CVE-2023-29552/index.md) IETF Service Location Protocol (SLP): Service Location Protocol (SLP) Denial-of-Service Vulnerability (due 2023-11-29; ransomware: Unknown)
- 2023-11-07 [CVE-2023-22518](https://erroneo.us/security/cve/CVE-2023-22518/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (due 2023-11-28; ransomware: Known)
- 2023-11-02 [CVE-2023-46604](https://erroneo.us/security/cve/CVE-2023-46604/index.md) Apache ActiveMQ: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability (due 2023-11-23; ransomware: Known)
- 2023-10-31 [CVE-2023-46748](https://erroneo.us/security/cve/CVE-2023-46748/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility SQL Injection Vulnerability (due 2023-11-21; ransomware: Unknown)
- 2023-10-31 [CVE-2023-46747](https://erroneo.us/security/cve/CVE-2023-46747/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability (due 2023-11-21; ransomware: Known)
- 2023-10-26 [CVE-2023-5631](https://erroneo.us/security/cve/CVE-2023-5631/index.md) Roundcube Webmail: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (due 2023-11-16; ransomware: Unknown)
- 2023-10-23 [CVE-2023-20273](https://erroneo.us/security/cve/CVE-2023-20273/index.md) Cisco Cisco IOS XE Web UI: Cisco IOS XE Web UI Command Injection Vulnerability (due 2023-10-27; ransomware: Unknown)
- 2023-10-18 [CVE-2023-4966](https://erroneo.us/security/cve/CVE-2023-4966/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (due 2023-11-08; ransomware: Known)
- 2023-10-16 [CVE-2023-20198](https://erroneo.us/security/cve/CVE-2023-20198/index.md) Cisco IOS XE Web UI: Cisco IOS XE Web UI Privilege Escalation Vulnerability (due 2023-10-20; ransomware: Unknown)
- 2023-10-10 [CVE-2023-44487](https://erroneo.us/security/cve/CVE-2023-44487/index.md) IETF HTTP/2: HTTP/2 Rapid Reset Attack Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-10 [CVE-2023-41763](https://erroneo.us/security/cve/CVE-2023-41763/index.md) Microsoft Skype for Business: Microsoft Skype for Business Privilege Escalation Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-10 [CVE-2023-36563](https://erroneo.us/security/cve/CVE-2023-36563/index.md) Microsoft WordPad: Microsoft WordPad Information Disclosure Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-10 [CVE-2023-21608](https://erroneo.us/security/cve/CVE-2023-21608/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Use-After-Free Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-10 [CVE-2023-20109](https://erroneo.us/security/cve/CVE-2023-20109/index.md) Cisco IOS and IOS XE: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-05 [CVE-2023-42824](https://erroneo.us/security/cve/CVE-2023-42824/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability (due 2023-10-26; ransomware: Unknown)
- 2023-10-05 [CVE-2023-40044](https://erroneo.us/security/cve/CVE-2023-40044/index.md) Progress WS_FTP Server: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability (due 2023-10-26; ransomware: Known)
- 2023-10-05 [CVE-2023-22515](https://erroneo.us/security/cve/CVE-2023-22515/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability (due 2023-10-13; ransomware: Known)
- 2023-10-04 [CVE-2023-42793](https://erroneo.us/security/cve/CVE-2023-42793/index.md) JetBrains TeamCity: JetBrains TeamCity Authentication Bypass Vulnerability (due 2023-10-25; ransomware: Known)
- 2023-10-04 [CVE-2023-28229](https://erroneo.us/security/cve/CVE-2023-28229/index.md) Microsoft Windows CNG Key Isolation Service: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (due 2023-10-25; ransomware: Unknown)
- 2023-10-03 [CVE-2023-4211](https://erroneo.us/security/cve/CVE-2023-4211/index.md) Arm Mali GPU Kernel Driver: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (due 2023-10-24; ransomware: Unknown)
- 2023-10-02 [CVE-2023-5217](https://erroneo.us/security/cve/CVE-2023-5217/index.md) Google Chromium libvpx: Google Chromium libvpx Heap Buffer Overflow Vulnerability (due 2023-10-23; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/8/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt