CISA Adds Two Known Vulnerabilities to Catalog

Here is a summary of the provided document:

Summary:
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, specifically CVE-2023-41064 and CVE-2023-41061, due to evidence of active exploitation. These vulnerabilities pose significant risks to the federal enterprise and are frequent attack vectors for malicious actors. The Binding Operational Directive (BOD) 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect their networks against active threats. Although the directive only applies to FCEB agencies, CISA urges all organizations to prioritize the timely remediation of catalog vulnerabilities as part of their vulnerability management practice.