CISA KEV Catalog Update Part II – November 2024

CISA KEV Catalog Update Part II – November 2024

The U.S. CISA added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following the massive exploitation in wild. CVE-2024-43093 Android Framework Privilege Escalation Vulnerability The vulnerability is a privileged escalation issue…
CISA KEV Catalog Update Part IV – October 2024

CISA KEV Catalog Update Part IV – October 2024

The US CISA has added below vulnerabilities to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. CVE-2024-30088  Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU)…
CISA adds CVE-2024-29824 to its KEV Catalog

CISA adds CVE-2024-29824 to its KEV Catalog

The US CISA has added Ivanti EPM flaw to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. CVE-2024-29824  Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability: Ivanti Endpoint Manager…