CISA Adds Two Known Exploited Vulnerabilities to Catalog, Removes Five KEVs

Here is a summary of the provided document:

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. The vulnerabilities are:

1. CVE-2023-42793: Jetbrick TeamCity Authentication Bypass Vulnerability
2. CVE-2023-28229: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Additionally, CISA has removed five previously listed CVEs from the catalog due to insufficient evidence of exploitation. The agency urges all organizations to prioritize the timely remediation of vulnerabilities listed in the catalog to reduce their exposure to cyberattacks.