CISA Adds Two Known Exploited Vulnerabilities to Catalog

🗓️ 14 May 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 21 Views

CISA has added two vulnerabilities to its catalog due to active exploitation, posing risks to federal networks.

Reporter	Title	Published	Views	Family All 67
GithubExploit	Exploit for Heap-based Buffer Overflow in Microsoft	25 Mar 202606:18	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	14 Aug 202416:20	–	githubexploit
ATTACKERKB	CVE-2024-30040	14 May 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-30051	14 May 202400:00	–	attackerkb
Information Security Automation	About Elevation of Privilege – Microsoft DWM Core Library (CVE-2025-30400) vulnerability	10 Jun 202508:44	–	avleonov
BDU FSTEC	The vulnerability of the Windows DWM library in Windows operating systems allows attackers to exploit their privileges.	15 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.	16 May 202400:00	–	bdu_fstec
Circl	CVE-2024-30040	14 May 202421:10	–	circl
Circl	CVE-2024-30051	14 May 202419:24	–	circl
CISA KEV Catalog	Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability	14 May 202400:00	–	cisa_kev

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-30051
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-30040
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

14 May 2024 12:00Current

7High risk

Vulners AI Score7

CVSS 3.18.8

EPSS0.05687

SSVC

cisa known exploited vulnerabilities microsoft dwm core library privilege escalation microsoft windows security feature bypass binding operational directive federal civilian executive branch vulnerability management.