CISA Adds Six Known Exploited Vulnerabilities to Catalog

Summary

CISA added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. These vulnerabilities affect Microsoft Windows and Office products and are frequent attack vectors.

IFF Assessment

FOE

The addition of actively exploited vulnerabilities to the KEV catalog indicates a higher risk for potential attacks.

Severity

9.0 Critical (AI Estimated)

Defender Context

These vulnerabilities are actively being exploited, requiring immediate attention from security teams. Prioritize patching these CVEs, especially in Microsoft Windows and Office environments. The KEV catalog is a valuable resource for identifying critical vulnerabilities to address promptly, and organizations should integrate it into their vulnerability management programs.

Read Full Story →