CISA's list that day
14 January 2025
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Fortinet FortiOS and FortiProxy and Microsoft Windows. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-55591Authentication Bypass | Fortinet FortiOS and FortiProxy | Patch this weekRansomware use; EPSS 0.94 | 0.94 | ||
| CVE-2025-21333Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow | Microsoft Windows | Patch soon | 0.10 | ||
| CVE-2025-21334Hyper-V NT Kernel Integration VSP Use-After-Free | Microsoft Windows | Patch soon | 0.02 | ||
| CVE-2025-21335Hyper-V NT Kernel Integration VSP Use-After-Free | Microsoft Windows | Patch soon | 0.01 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.