CISA Known Exploited Vulnerabilities
KEV additions — February 2024
9 CVEs entered the KEV catalog in February 2024.
Added February 29, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 8.4 | 22.1 % | March 21, 2024 |
Added February 22, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-1709ransomware | ConnectWise ScreenConnect Authentication Bypass Vulnerability | 10 | 94.3 % | February 29, 2024 |
Added February 15, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-3259ransomware | Cisco ASA and FTD Information Disclosure Vulnerability | 7.5 | 69.7 % | March 7, 2024 |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | 9.8 | 3.1 % | March 7, 2024 |
Added February 13, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 7.6 | 9.5 % | March 5, 2024 |
| CVE-2024-21412ransomware | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | 8.1 | 93.8 % | March 5, 2024 |
Added February 12, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 6.1 | 76.4 % | March 4, 2024 |
Added February 9, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21762ransomware | Fortinet FortiOS Out-of-Bound Write Vulnerability | 9.8 | 92.9 % | February 16, 2024 |
Added February 6, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 54.8 % | February 27, 2024 |