CISA's list that day
13 September 2023
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Google Chromium WebP, Cisco Adaptive Security Appliance and Firepower Threat Defense and Android Framework. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-4863Heap-Based Buffer Overflow | Google Chromium WebP | Patch this weekEPSS 0.99 | 0.99 | ||
| CVE-2023-20269Unauthorized Access | Cisco Adaptive Security Appliance and Firepower Threat Defense | Patch this weekRansomware use | 0.25 | ||
| CVE-2023-35674Privilege Escalation | Android Framework | Patch soon | 0.03 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.