CISA Known Exploited Vulnerabilities
KEV additions — June 2024
8 CVEs entered the KEV catalog in June 2024.
Added June 26, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 82.7 % | July 17, 2024 |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 10 | 94.0 % | July 17, 2024 |
| CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability | 7.8 | 2.5 % | July 17, 2024 |
Added June 13, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-26169ransomware | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | 7.8 | 35.1 % | July 4, 2024 |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability | 7.8 | 0.2 % | July 4, 2024 |
| CVE-2024-4358 | Registration Authentication Bypass Vulnerability | 9.8 | 94.3 % | July 4, 2024 |
Added June 12, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-4577ransomware | PHP-CGI OS Command Injection Vulnerability | 9.8 | 94.4 % | July 3, 2024 |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 7.8 | 0.8 % | July 3, 2024 |