CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog

By Newsroom — November 17^th 2023 at 05:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild. The vulnerabilities are as follows - CVE-2023-36584 (CVSS score: 5.4) - Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability CVE-2023-1671 (CVSS score: 9.8) -

FreshRSS

CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog