Vulnerabilities added to KEV in January 2024
Added21
Ransomware-linked8
Vendors13
By vendor
4
3
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 99.9% | Known |
| CVE-2022-48618 | Apple Multiple Products | 2024-01-31 | 0.4% | Unknown |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | 2024-01-24 | 99.9% | Known |
| CVE-2024-23222 | Apple Multiple Products | 2024-01-23 | 10.5% | Unknown |
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | 99.4% | Unknown |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 99.9% | Known |
| CVE-2024-0519 | Google Chromium V8 | 2024-01-17 | 3.8% | Unknown |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 57.6% | Unknown |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 3.1% | Unknown |
| CVE-2018-15133 | Laravel Laravel Framework | 2024-01-16 | 76.8% | Unknown |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | 99.9% | Known |
| CVE-2023-41990 | Apple Multiple Products | 2024-01-08 | 1.3% | Unknown |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | 97.0% | Known |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 99.9% | Known |
| CVE-2023-27524 | Apache Superset | 2024-01-08 | 97.4% | Unknown |
| CVE-2023-23752 | Joomla! Joomla! | 2024-01-08 | 99.8% | Unknown |
| CVE-2016-20017 | D-Link DSL-2750B Devices | 2024-01-08 | 64.2% | Unknown |
| CVE-2023-7101 | Spreadsheet::ParseExcel Spreadsheet::ParseExcel | 2024-01-02 | 19.1% | Unknown |
| CVE-2023-7024 | Google Chromium WebRTC | 2024-01-02 | 6.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.