CISA Known Exploited Vulnerabilities
KEV additions — August 2024
19 CVEs entered the KEV catalog in August 2024.
Added August 28, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | 8.8 | 27.1 % | September 18, 2024 |
Added August 27, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability | 9.8 | 94.4 % | September 17, 2024 |
Added August 26, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | 9.6 | 1.5 % | September 16, 2024 |
Added August 23, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-39717 | Versa Director Dangerous File Type Upload Vulnerability | 7.2 | 4.6 % | September 13, 2024 |
Added August 21, 20244
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-31196 | Microsoft Exchange Server Information Disclosure Vulnerability | 7.2 | 3.3 % | September 11, 2024 |
| CVE-2021-33044 | Dahua IP Camera Authentication Bypass Vulnerability | 9.8 | 94.3 % | September 11, 2024 |
| CVE-2021-33045 | Dahua IP Camera Authentication Bypass Vulnerability | 9.8 | 94.2 % | September 11, 2024 |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 8.4 | 1.3 % | September 11, 2024 |
Added August 19, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23897ransomware | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 9.8 | 94.5 % | September 9, 2024 |
Added August 15, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9.8 | 75.1 % | September 5, 2024 |
Added August 13, 20246
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7 | 0.8 % | September 3, 2024 |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 7.8 | 3.4 % | September 3, 2024 |
| CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 7.5 | 26.8 % | September 3, 2024 |
| CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability | 8.8 | 43.7 % | September 3, 2024 |
| CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 7.8 | 74.8 % | September 3, 2024 |
| CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 6.5 | 59.3 % | September 3, 2024 |
Added August 7, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-32113 | Apache OFBiz Path Traversal Vulnerability | 9.8 | 93.9 % | August 28, 2024 |
| CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability | 7.8 | 0.6 % | August 28, 2024 |
Added August 5, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 8.8 | 91.5 % | August 26, 2024 |