Vulnerabilities added to KEV in October 2023
Added18
Ransomware-linked5
Vendors13
By vendor
3
3
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-46748 | F5 BIG-IP Configuration Utility | 2023-10-31 | 4.4% | Unknown |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | 2023-10-31 | 96.5% | Known |
| CVE-2023-5631 | Roundcube Webmail | 2023-10-26 | 75.8% | Unknown |
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 2023-10-23 | 89.6% | Unknown |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | 99.9% | Known |
| CVE-2023-20198 | Cisco IOS XE Web UI | 2023-10-16 | 99.5% | Unknown |
| CVE-2023-44487 | IETF HTTP/2 | 2023-10-10 | 99.9% | Unknown |
| CVE-2023-41763 | Microsoft Skype for Business | 2023-10-10 | 90.3% | Unknown |
| CVE-2023-36563 | Microsoft WordPad | 2023-10-10 | 20.7% | Unknown |
| CVE-2023-21608 | Adobe Acrobat and Reader | 2023-10-10 | 61.4% | Unknown |
| CVE-2023-20109 | Cisco IOS and IOS XE | 2023-10-10 | 2.4% | Unknown |
| CVE-2023-42824 | Apple iOS and iPadOS | 2023-10-05 | 1.0% | Unknown |
| CVE-2023-40044 | Progress WS_FTP Server | 2023-10-05 | 90.3% | Known |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | 2023-10-05 | 99.2% | Known |
| CVE-2023-42793 | JetBrains TeamCity | 2023-10-04 | 99.9% | Known |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | 2023-10-04 | 1.6% | Unknown |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver | 2023-10-03 | 1.0% | Unknown |
| CVE-2023-5217 | Google Chromium libvpx | 2023-10-02 | 49.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.