CISA Adds Three Known Exploited Vulnerabilities to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, which are deemed to be actively exploited. The new vulnerabilities are CVE-2023-6549 (Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow), CVE-2023-6548 (Citrix NetScaler ADC and NetScaler Gateway Code Injection), and CVE-2024-0519 (Google Chromium V8 Out-of-Bounds Memory Access). These vulnerabilities are considered high-risk and may lead to cyber attacks if not addressed. The CISA strongly advises organizations to prioritize timely remediation of these vulnerabilities as part of their vulnerability management practice to reduce the risk of exploitation.