CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

A new vulnerability, CVE-2024-21338, has been added to the Known Exploited Vulnerabilities Catalog, indicating evidence of active exploitation. This Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise and organizations. The US Cybersecurity and Infrastructure Agency (CISA) recommends that all organizations prioritize timely remediation of vulnerabilities listed in the Catalog as part of their vulnerability management practice to reduce their exposure to cyberattacks.