CISA Known Exploited Vulnerabilities
KEV additions — March 2024
10 CVEs entered the KEV catalog in March 2024.
Added March 26, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-24955ransomware | Microsoft SharePoint Server Code Injection Vulnerability | 7.2 | 91.8 % | April 16, 2024 |
Added March 25, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-7256 | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | 9.8 | 94.4 % | April 15, 2024 |
| CVE-2021-44529ransomware | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 9.8 | 94.5 % | April 15, 2024 |
| CVE-2023-48788ransomware | Fortinet FortiClient EMS SQL Injection Vulnerability | 9.8 | 94.2 % | April 15, 2024 |
Added March 7, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-27198ransomware | JetBrains TeamCity Authentication Bypass Vulnerability | 9.8 | 94.6 % | March 28, 2024 |
Added March 6, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 0.1 % | March 27, 2024 |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 0.1 % | March 27, 2024 |
Added March 5, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity | 9.8 | 93.6 % | March 26, 2024 |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability | 5.5 | 0.7 % | March 26, 2024 |
Added March 4, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21338ransomware | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | 7.8 | 77.3 % | March 25, 2024 |