Jul 23, 2024
1 new incident, 1 with updates.
Started
- ClosedHighNo patch yet
Microsoft Internet Explorer Use-After-Free
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object. Added to the CISA KEV catalog on 2024-07-23. CVE-2012-4792 was assigned before 2024; the KEV listing came in 2024.
Microsoft Internet ExplorerClosed Jul 23, 2024
Updated
- ClosedPatched
Twilio Authy Information Disclosure
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy. Added to the CISA KEV catalog on 2024-07-23.
Twilio AuthyClosed Jul 23, 2024
