Kev Catalog
The latest Kev Catalog coverage — news, analysis, and updates from the WindowsNews.AI desk.
CISA Flags XWiki RCE (CVE-2024-5274) and VMware LPE (CVE-2024-22280) as Actively Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated its security warnings by adding two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling...
Microsoft Issues Emergency WSUS Patch for Critical CVE-2025-59287 RCE Vulnerability
Microsoft has released an out-of-band emergency security update addressing a critical remote code execution vulnerability in Windows Server Update Services (WSUS) tracked as CVE-2025-59287. The...
CVE-2025-33073: Critical Windows SMB Client Vulnerability Requires Immediate Patching
Microsoft has issued an urgent security advisory for a high-severity privilege escalation vulnerability in the Windows SMB client, designated CVE-2025-33073, which has been actively exploited in the...
CISA Adds 5 Critical CVEs to KEV Catalog: Urgent Patching Required
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated five newly discovered vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, immediately raising them to the...
Microsoft Removes Vulnerable Agere Modem Driver in Windows Security Update
Microsoft has taken decisive action to remove the legacy Agere Systems soft-modem driver (ltmdm64.sys) from all supported Windows images following the discovery of a critical elevation-of-privilege...
Grafana CVE-2021-43798 Added to CISA KEV Catalog: Critical Alert
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated the urgency around a previously identified Grafana vulnerability by adding CVE-2021-43798 to its Known Exploited...
CISA Adds Critical Zimbra XSS Vulnerability CVE-2025-27915 to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated the urgency surrounding a critical security flaw in Zimbra's email collaboration platform by adding CVE-2025-27915 to its...
CISA KEV Catalog Adds 7 Critical Vulnerabilities Including Oracle EBS RCE
The Cybersecurity and Infrastructure Security Agency (CISA) has significantly expanded its Known Exploited Vulnerabilities (KEV) Catalog this week, adding seven critical security flaws that threat...
CISA KEV 2025 Update: 5 Critical CVEs Require Immediate Patching
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog with five critical additions that demand immediate attention from...
CISA Adds 5 Critical Exploited Vulnerabilities to KEV Catalog - Immediate Action Required
The Cybersecurity and Infrastructure Security Agency (CISA) has urgently updated its Known Exploited Vulnerabilities (KEV) Catalog with five new critical security flaws that are currently being...
CISA Flags Actively Exploited Chrome V8 Bug CVE-2025-10585, Mandating Emergency Patches
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated the urgency surrounding CVE-2025-10585 by adding it to its Known Exploited Vulnerabilities (KEV) Catalog, signaling that this...
CISA Warns: Patch Linux Kernel, Android, and Sitecore Now as Active Attacks Confirmed
{ "title": "CISA Warns: Patch Linux Kernel, Android, and Sitecore Now as Active Attacks Confirmed", "content": "CISA has added three actively exploited vulnerabilities to its Known Exploited...