Skip to content

Patch first Vendors Added Changes Method

Home
Added
December 2024

CISA's list that month

December 2024

In December 2024 CISA added 16 vulnerabilities to its list of exploited vulnerabilities, on 10 days.

3 December 2024

3 added

CVE-2023-45727
CVE-2024-11667
CVE-2024-11680

4 December 2024

1 added

CVE-2024-51378

10 December 2024

1 added

CVE-2024-49138

13 December 2024

1 added

CVE-2024-50623

16 December 2024

2 added

CVE-2024-20767
CVE-2024-35250

17 December 2024

1 added

CVE-2024-55956

18 December 2024

4 added

CVE-2018-14933
CVE-2019-11001
CVE-2021-40407
CVE-2022-23227

19 December 2024

1 added

CVE-2024-12356

23 December 2024

1 added

CVE-2021-44207

30 December 2024

1 added

CVE-2024-3393

← November 2024Every monthJanuary 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com