CISA's list that day

2 January 2024

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Google Chromium WebRTC and Spreadsheet::ParseExcel. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2023-7101Remote Code ExecutionSpreadsheet::ParseExcel Spreadsheet::ParseExcelPatch this weekMetasploit module0.19
CVE-2023-7024Heap Buffer OverflowGoogle Chromium WebRTCPatch soon0.07

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.