CISA Adds Two Known Exploited Vulnerabilities to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. The new vulnerabilities are CVE-2023-21237, an Android Pixel information disclosure vulnerability, and CVE-2021-36380, a Sunhillo SureLine OS command injection vulnerability. CISA has emphasized that these types of vulnerabilities are frequent attack vectors and pose significant risks to the federal enterprise. The agency urges all organizations to prioritize timely remediation of these catalog vulnerabilities as part of their vulnerability management practice.