CISA's list that day
15 October 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Mozilla Firefox, SolarWinds Web Help Desk and Microsoft Windows. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-28987Hardcoded Credential | SolarWinds Web Help Desk | Patch this weekMetasploit module; EPSS 0.93 | 0.93 | ||
| CVE-2024-30088Kernel TOCTOU Race Condition | Microsoft Windows | Patch this weekRansomware use; EPSS 0.68 | 0.68 | ||
| CVE-2024-9680Use-After-Free | Mozilla Firefox | Patch this weekRansomware use | 0.23 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.