CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

8 result(s)

Export this search: RSS · CSV · STIX
CVE-2024-29059 High · 7.5 KEV High · 69 Public exploit CWE-209 Mar 22, 2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
CVE-2024-20767 High · 7.4 KEV Urgent · 79 Public exploit CWE-284 Mar 18, 2024
Adobe ColdFusion Improper Access Control Vulnerability
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interaction. Exploitation of this issue requires the admin panel be exposed to the internet.
CVE-2024-26169 High · 7.8 KEV Urgent · 71 Public exploit Ransomware CWE-269 Mar 12, 2024
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-48788 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware CWE-89 Mar 12, 2024
Fortinet FortiClient EMS SQL Injection Vulnerability
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2024-23296 High · 7.8 KEV High · 58 Public exploit CWE-787 Mar 5, 2024
Apple Multiple Products Memory Corruption Vulnerability
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVE-2024-23225 High · 7.8 KEV High · 52 CWE-787 Mar 5, 2024
Apple Multiple Products Memory Corruption Vulnerability
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVE-2024-27198 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-288 Mar 4, 2024
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVE-2024-27199 High · 7.3 KEV Urgent · 73 Public exploit Ransomware CWE-22 Mar 4, 2024
JetBrains TeamCity Relative Path Traversal Vulnerability
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible