CISA Adds Five Vulnerabilities to KEV

[Kyaw_Myo_Oo]

Dear All,

On Tuesday, October 10, the US Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) database, including a use-after-free vulnerability in Adobe Acrobat and Reader; a patch has been available for the flaw since January 2023. The other recently-added KEV entries are an out-of-bounds write vulnerability in Cisco IOS and IOS XE; the two zero-days that Microsoft addressed in this week’s Patch Tuesday; and a rapid reset attack vulnerability in HTTP/2.

Known Exploited Vulnerabilities Catalog | CISA

[Early_Adopter]

Gotta get it all patched - if you have year old CVEs in your components even if you check say “naw, that’s alright!” - it’s probably the tip of the iceberg… you will be owned eventually.

[Kyaw_Myo_Oo]

Thanks for sharing your thoughts and views. @Early_Adopter