CISA's list that day
14 February 2023
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Office, Microsoft Windows and Apple Multiple Products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-23376Common Log File System (CLFS) Driver Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.11 | ||
| CVE-2023-21715Publisher Security Feature Bypass | Microsoft Office | Patch soon | 0.12 | ||
| CVE-2023-23529WebKit Type Confusion | Apple Multiple Products | Patch soon | 0.10 | ||
| CVE-2023-21823Graphic Component Privilege Escalation | Microsoft Windows | Patch soon | 0.06 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.