Oct 8, 2024
1 new incident, 2 with updates.
Started
- ClosedHighPatched
Microsoft October 2024: 2 actively exploited zero-days
CVE-2024-43572: Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. CVE-2024-43573: Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. Added to the CISA KEV catalog on 2024-10-08.
Microsoft WindowsClosed Oct 8, 2024
Updated
- ClosedHighPatched
Qualcomm Multiple Chipsets Use-After-Free
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. Added to the CISA KEV catalog on 2024-10-08.
Qualcomm Multiple ChipsetsClosed Oct 8, 2024
- ClosedCriticalPatched
Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor
Four Ivanti Cloud Services Appliance (CSA) bugs were exploited in 2024: a command injection (CVE-2024-8190), a path traversal admin bypass (CVE-2024-8963), and later a SQL injection and another command injection (CVE-2024-9379, CVE-2024-9380). FortiGuard Incident Response found a suspected nation-state actor chaining them. CSA 4.6 was end-of-life; Ivanti urged upgrading to CSA 5.0. Added to the CISA KEV catalog on 2024-09-13, 2024-09-19, 2024-10-09.
Ivanti Cloud Services Appliance / Cloud Services Appliance (CSA)Closed Oct 9, 2024
