CISA Adds Two Known Exploited Vulnerabilities to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, specifically CVE-2024-23225 and CVE-2024-23296, which affect Apple iOS and iPadOS. These memory corruption vulnerabilities are considered high-risk attack vectors and pose significant threats to the federal enterprise. The Known Exploited Vulnerabilities Catalog is a living list of known vulnerabilities that require federal agencies to remediate identified vulnerabilities by the due date to protect against active threats. While this directive only applies to Federal Civilian Executive Branch agencies, CISA advises all organizations to prioritize the timely remediation of catalog vulnerabilities as part of their vulnerability management practice to reduce exposure to cyberattacks.