CISA Adds Two Known Exploited Vulnerabilities to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. The new vulnerabilities, CVE-2024-21412 and CVE-2024-21351, are security feature bypass vulnerabilities in Microsoft Windows Internet Shortcut Files and SmartScreen respectively. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise and all organizations. CISA is urging all organizations to prioritize timely remediation of these vulnerabilities as part of their vulnerability management practice to reduce their exposure to cyberattacks.