CISA's list that day

14 May 2024

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows and Microsoft DWM Core Library. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2024-30051Privilege EscalationMicrosoft DWM Core LibraryPatch this weekRansomware use0.06
CVE-2024-30040MSHTML Platform Security Feature BypassMicrosoft WindowsPatch soon0.04

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.