CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Key Points:

• CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating active exploitation.
• The vulnerabilities include CVE-2012-1854, CVE-2020-9715, CVE-2023-21529, CVE-2023-36424, CVE-2025-60710, CVE-2026-21643, and CVE-2026-34621, affecting Microsoft and Adobe products, posing significant risks to federal networks.
• Organizations are urged to prioritize remediation of these vulnerabilities to mitigate potential cyber threats.

Technical Details: The listed vulnerabilities include various types such as insecure library loading, use-after-free issues, deserialization of untrusted data, out-of-bounds reads, SQL injection flaws, and prototype pollution. These vulnerabilities are common attack vectors for cyber actors.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned