CISA's list that day
10 September 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows and Microsoft Publisher. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-38217Mark of the Web (MOTW) Protection Mechanism Failure | Microsoft Windows | Patch soon | 0.10 | ||
| CVE-2024-38014Installer Improper Privilege Management | Microsoft Windows | Patch soon | 0.06 | ||
| CVE-2024-38226Protection Mechanism Failure | Microsoft Publisher | Patch soon | 0.03 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.