CISA's list that day
22 June 2023
On CISA added 6 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Win32k, Mozilla Firefox, Firefox ESR, and Thunderbird, Roundcube Webmail and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2016-9079Use-After-Free | Mozilla Firefox, Firefox ESR, and Thunderbird | Patch this weekMetasploit module; EPSS 0.87; verified Exploit-DB entry | 0.87 | ||
| CVE-2023-20887Command Injection | VMware Aria Operations for Networks | Patch this weekMetasploit module; EPSS 0.98 | 0.98 | ||
| CVE-2020-12641Remote Code Execution | Roundcube Roundcube Webmail | Patch this weekEPSS 0.84 | 0.84 | ||
| CVE-2021-44026SQL Injection | Roundcube Roundcube Webmail | Patch this weekEPSS 0.70 | 0.70 | ||
| CVE-2020-35730Cross-Site Scripting (XSS) | Roundcube Roundcube Webmail | Patch soon | 0.33 | ||
| CVE-2016-0165Privilege Escalation | Microsoft Win32k | Patch soon | 0.14 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.