CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability
CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability
CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability
CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view other newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column—which will sort by descending dates.
Read the full article HERE