pwn.watch: Microsoft incident updates https://pwn.watch/t/microsoft Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [critical] ConnectWise Cloud Backup shut down after M365 app-identity hijack: Microsoft details Storm-0940's Oct 10-14 password spray (151,000+ failed logons, peak 2,900/min) before the Oct 15 takeover of ConnectWise cloud app identities; ConnectWise says phased service restoration will take several days. https://pwn.watch/i/connectwise-cloud-backup-m365-hijack connectwise-cloud-backup-m365-hijack:2026-10-22:Microsoft details Storm-0940's Oct 10-14 password spray (151,000+ failed logons, peak 2,900/min) before the Oct 15 takeover of ConnectWise cloud app identities; ConnectWise says phased service restoration will take several days. Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html Status: live, partial [critical] ConnectWise Cloud Backup shut down after M365 app-identity hijack: ConnectWise CEO Manny Rivelo says the affected application connections are contained and services are being restored gradually, but cutting those connections won't necessarily evict attackers who already set up persistent access in customer tenants. Microsoft hasn't said how many customers were compromised. https://pwn.watch/i/connectwise-cloud-backup-m365-hijack connectwise-cloud-backup-m365-hijack:2026-10-22:ConnectWise CEO Manny Rivelo says the affected application connections are contained and services are being restored gradually, but cutting those connections won't necessarily evict attackers who already set up persistent access in customer tenants. Microsoft hasn't said how many customers were compromised. Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/5304687 Status: live, partial [critical] ConnectWise Cloud Backup shut down after M365 app-identity hijack: Wiz Research says the same ARTEX-using actor, overlapping with Storm-0940, is also targeting other IT and software vendors: password-spraying Okta and Entra, abusing Cognito and account-recovery endpoints, and probing Microsoft 365 integrations and tenant isolation. Wiz published IPs and user agents to hunt for. https://pwn.watch/i/connectwise-cloud-backup-m365-hijack connectwise-cloud-backup-m365-hijack:2026-10-22:Wiz Research says the same ARTEX-using actor, overlapping with Storm-0940, is also targeting other IT and software vendors: password-spraying Okta and Entra, abusing Cognito and account-recovery endpoints, and probing Microsoft 365 integrations and tenant isolation. Wiz published IPs and user agents to hunt for. Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://www.wiz.io/blog/artex-in-the-wild-storm-0940-expands-targeting-of-it-and-software-vendors Status: live, partial [critical] ConnectWise Cloud Backup shut down after M365 app-identity hijack: Microsoft attributes the ConnectWise supply-chain compromise to China-aligned Storm-0940, using the agentic AI framework ARTEX; 2,250+ Microsoft 365 tenants targeted. https://pwn.watch/i/connectwise-cloud-backup-m365-hijack connectwise-cloud-backup-m365-hijack:2026-10-21:Microsoft attributes the ConnectWise supply-chain compromise to China-aligned Storm-0940, using the agentic AI framework ARTEX; 2,250+ Microsoft 365 tenants targeted. Wed, 21 Oct 2026 00:00:00 GMT critical Source: https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/ Status: live, partial [high] Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951): Microsoft ships patches; CISA KEV lists CVE-2026-96951. https://pwn.watch/i/windows-shell-cve-2026-96951-motw windows-shell-cve-2026-96951-motw:2026-10-13:Microsoft ships patches; CISA KEV lists CVE-2026-96951. Tue, 13 Oct 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability: CISA added CVE-2026-65660 to the KEV catalog (due 2026-09-28). https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660 microsoft-sharepoint-cve-2026-65660:2026-09-25:CISA added CVE-2026-65660 to the KEV catalog (due 2026-09-28). Fri, 25 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Microsoft Windows Link Following Vulnerability: CISA added CVE-2026-81963, CVE-2026-85880 to the KEV catalog (due 2026-09-22). https://pwn.watch/i/microsoft-windows-cve-2026-81963 microsoft-windows-cve-2026-81963:2026-09-08:CISA added CVE-2026-81963, CVE-2026-85880 to the KEV catalog (due 2026-09-22). Tue, 08 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability: CISA added CVE-2026-33824 to the KEV catalog (due 2026-08-21). https://pwn.watch/i/microsoft-internet-key-exchange-ike-service-extensions-cve-2026-33824 microsoft-internet-key-exchange-ike-service-extensions-cve-2026-33824:2026-08-18:CISA added CVE-2026-33824 to the KEV catalog (due 2026-08-21). Tue, 18 Aug 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability: CISA added CVE-2026-55040 to the KEV catalog (due 2026-08-21). https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040 microsoft-sharepoint-cve-2026-55040:2026-08-18:CISA added CVE-2026-55040 to the KEV catalog (due 2026-08-21). Tue, 18 Aug 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability: CISA added CVE-2026-68820 to the KEV catalog (due 2026-08-25). https://pwn.watch/i/microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820 microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820:2026-08-11:CISA added CVE-2026-68820 to the KEV catalog (due 2026-08-25). Tue, 11 Aug 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability : CISA added CVE-2026-50522 to the KEV catalog (due 2026-07-25). https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522 microsoft-sharepoint-cve-2026-50522:2026-07-22:CISA added CVE-2026-50522 to the KEV catalog (due 2026-07-25). Wed, 22 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability: CISA added CVE-2026-58644 to the KEV catalog (due 2026-07-19). https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644 microsoft-sharepoint-cve-2026-58644:2026-07-16:CISA added CVE-2026-58644 to the KEV catalog (due 2026-07-19). Thu, 16 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability : CISA added CVE-2026-56155 to the KEV catalog (due 2026-07-28). https://pwn.watch/i/microsoft-active-directory-federation-services-cve-2026-56155 microsoft-active-directory-federation-services-cve-2026-56155:2026-07-14:CISA added CVE-2026-56155 to the KEV catalog (due 2026-07-28). Tue, 14 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability: CISA added CVE-2026-56164 to the KEV catalog (due 2026-07-17). https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164 microsoft-sharepoint-server-cve-2026-56164:2026-07-14:CISA added CVE-2026-56164 to the KEV catalog (due 2026-07-17). Tue, 14 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability: CISA added CVE-2026-45659 to the KEV catalog (due 2026-07-04). https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659 microsoft-sharepoint-server-cve-2026-45659:2026-07-01:CISA added CVE-2026-45659 to the KEV catalog (due 2026-07-04). Wed, 01 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Defender: Microsoft Defender Link Following Vulnerability: CISA added CVE-2026-41091, CVE-2026-45498 to the KEV catalog (due 2026-06-03). https://pwn.watch/i/microsoft-defender-cve-2026-41091 microsoft-defender-cve-2026-41091:2026-05-20:CISA added CVE-2026-41091, CVE-2026-45498 to the KEV catalog (due 2026-06-03). Wed, 20 May 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Microsoft: Microsoft Exchange Server Cross-Site Scripting Vulnerability: CISA added CVE-2026-42897 to the KEV catalog (due 2026-05-29). https://pwn.watch/i/microsoft-microsoft-cve-2026-42897 microsoft-microsoft-cve-2026-42897:2026-05-15:CISA added CVE-2026-42897 to the KEV catalog (due 2026-05-29). Fri, 15 May 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Microsoft Windows Protection Mechanism Failure Vulnerability: CISA added CVE-2026-32202 to the KEV catalog (due 2026-05-12). https://pwn.watch/i/microsoft-windows-cve-2026-32202 microsoft-windows-cve-2026-32202:2026-04-28:CISA added CVE-2026-32202 to the KEV catalog (due 2026-05-12). Tue, 28 Apr 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Defender: Microsoft Defender Insufficient Granularity of Access Control Vulnerability: CISA added CVE-2026-33825 to the KEV catalog (due 2026-05-06). https://pwn.watch/i/microsoft-defender-cve-2026-33825 microsoft-defender-cve-2026-33825:2026-04-22:CISA added CVE-2026-33825 to the KEV catalog (due 2026-05-06). Wed, 22 Apr 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability: CISA added CVE-2026-32201 to the KEV catalog (due 2026-04-28). https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201 microsoft-sharepoint-server-cve-2026-32201:2026-04-14:CISA added CVE-2026-32201 to the KEV catalog (due 2026-04-28). Tue, 14 Apr 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Microsoft Windows Link Following Vulnerability: CISA added CVE-2025-60710, CVE-2023-36424 to the KEV catalog (due 2026-04-27). https://pwn.watch/i/microsoft-windows-cve-2025-60710 microsoft-windows-cve-2025-60710:2026-04-13:CISA added CVE-2025-60710, CVE-2023-36424 to the KEV catalog (due 2026-04-27). Mon, 13 Apr 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability: CISA added CVE-2026-20963 to the KEV catalog (due 2026-03-21). https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963 microsoft-sharepoint-cve-2026-20963:2026-03-18:CISA added CVE-2026-20963 to the KEV catalog (due 2026-03-21). Wed, 18 Mar 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Office: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability: CISA added CVE-2026-21514 to the KEV catalog (due 2026-03-03). https://pwn.watch/i/microsoft-office-cve-2026-21514 microsoft-office-cve-2026-21514:2026-02-10:CISA added CVE-2026-21514 to the KEV catalog (due 2026-03-03). Tue, 10 Feb 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability: CISA added CVE-2026-21513, CVE-2026-21525, CVE-2026-21510, CVE-2026-21533, CVE-2026-21519 to the KEV catalog (due 2026-03-03). https://pwn.watch/i/microsoft-windows-cve-2026-21513 microsoft-windows-cve-2026-21513:2026-02-10:CISA added CVE-2026-21513, CVE-2026-21525, CVE-2026-21510, CVE-2026-21533, CVE-2026-21519 to the KEV catalog (due 2026-03-03). Tue, 10 Feb 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Office: Microsoft Office Security Feature Bypass Vulnerability: CISA added CVE-2026-21509 to the KEV catalog (due 2026-02-16). https://pwn.watch/i/microsoft-office-cve-2026-21509 microsoft-office-cve-2026-21509:2026-01-26:CISA added CVE-2026-21509 to the KEV catalog (due 2026-02-16). Mon, 26 Jan 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Microsoft Windows Information Disclosure Vulnerability: CISA added CVE-2026-20805 to the KEV catalog (due 2026-02-03). https://pwn.watch/i/microsoft-windows-cve-2026-20805 microsoft-windows-cve-2026-20805:2026-01-13:CISA added CVE-2026-20805 to the KEV catalog (due 2026-02-03). Tue, 13 Jan 2026 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Windows Use After Free Vulnerability: CISA added CVE-2025-62221 to the KEV catalog (due 2025-12-30). https://pwn.watch/i/microsoft-windows-cve-2025-62221 microsoft-windows-cve-2025-62221:2025-12-09:CISA added CVE-2025-62221 to the KEV catalog (due 2025-12-30). Tue, 09 Dec 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: Windows Race Condition Vulnerability: CISA added CVE-2025-62215 to the KEV catalog (due 2025-12-03). https://pwn.watch/i/microsoft-windows-cve-2025-62215 microsoft-windows-cve-2025-62215:2025-11-12:CISA added CVE-2025-62215 to the KEV catalog (due 2025-12-03). Wed, 12 Nov 2025 00:00:00 GMT high Status: closed, patched [critical] Microsoft Windows: Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability: CISA added CVE-2025-59287 to the KEV catalog (due 2025-11-14). https://pwn.watch/i/microsoft-windows-cve-2025-59287 microsoft-windows-cve-2025-59287:2025-10-24:CISA added CVE-2025-59287 to the KEV catalog (due 2025-11-14). Fri, 24 Oct 2025 00:00:00 GMT critical Status: closed, patched [high] Microsoft Windows: Windows SMB Client Improper Access Control Vulnerability: CISA added CVE-2025-33073 to the KEV catalog (due 2025-11-10). https://pwn.watch/i/microsoft-windows-cve-2025-33073 microsoft-windows-cve-2025-33073:2025-10-20:CISA added CVE-2025-33073 to the KEV catalog (due 2025-11-10). Mon, 20 Oct 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-24990 to the KEV catalog (due 2025-11-04). https://pwn.watch/i/microsoft-windows-cve-2025-24990 microsoft-windows-cve-2025-24990:2025-10-14:CISA added CVE-2025-24990 to the KEV catalog (due 2025-11-04). Tue, 14 Oct 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-59230 to the KEV catalog (due 2025-11-04). https://pwn.watch/i/microsoft-windows-cve-2025-24990 microsoft-windows-cve-2025-24990:2025-10-14:CISA added CVE-2025-59230 to the KEV catalog (due 2025-11-04). Tue, 14 Oct 2025 00:00:00 GMT high Status: closed, patched [critical] Microsoft Windows: 3 exploited vulnerabilities (CVE-2011-3402, CVE-2013-3918, CVE-2021-43226): CISA added CVE-2011-3402 to the KEV catalog (due 2025-10-27). https://pwn.watch/i/microsoft-windows-cve-2011-3402 microsoft-windows-cve-2011-3402:2025-10-06:CISA added CVE-2011-3402 to the KEV catalog (due 2025-10-27). Mon, 06 Oct 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 3 exploited vulnerabilities (CVE-2011-3402, CVE-2013-3918, CVE-2021-43226): CISA added CVE-2013-3918 to the KEV catalog (due 2025-10-27). https://pwn.watch/i/microsoft-windows-cve-2011-3402 microsoft-windows-cve-2011-3402:2025-10-06:CISA added CVE-2013-3918 to the KEV catalog (due 2025-10-27). Mon, 06 Oct 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 3 exploited vulnerabilities (CVE-2011-3402, CVE-2013-3918, CVE-2021-43226): CISA added CVE-2021-43226 to the KEV catalog (due 2025-10-27). https://pwn.watch/i/microsoft-windows-cve-2011-3402 microsoft-windows-cve-2011-3402:2025-10-06:CISA added CVE-2021-43226 to the KEV catalog (due 2025-10-27). Mon, 06 Oct 2025 00:00:00 GMT critical Status: closed, patched [high] Microsoft Internet Explorer: Internet Explorer Uninitialized Memory Corruption Vulnerability: CISA added CVE-2010-3962 to the KEV catalog (due 2025-10-27). https://pwn.watch/i/microsoft-internet-explorer-cve-2010-3962 microsoft-internet-explorer-cve-2010-3962:2025-10-06:CISA added CVE-2010-3962 to the KEV catalog (due 2025-10-27). Mon, 06 Oct 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Internet Explorer: Internet Explorer Resource Management Errors Vulnerability: CISA added CVE-2013-3893 to the KEV catalog (due 2025-09-02). https://pwn.watch/i/microsoft-internet-explorer-cve-2013-3893 microsoft-internet-explorer-cve-2013-3893:2025-08-12:CISA added CVE-2013-3893 to the KEV catalog (due 2025-09-02). Tue, 12 Aug 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Office: Office Excel Remote Code Execution Vulnerability: CISA added CVE-2007-0671 to the KEV catalog (due 2025-09-02). https://pwn.watch/i/microsoft-office-cve-2007-0671 microsoft-office-cve-2007-0671:2025-08-12:CISA added CVE-2007-0671 to the KEV catalog (due 2025-09-02). Tue, 12 Aug 2025 00:00:00 GMT high Status: closed, patched [critical] ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706): Microsoft attributes exploitation to Linen Typhoon, Violet Typhoon and Storm-2603 https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770 toolshell-sharepoint-cve-2025-53770:2025-07-22:Microsoft attributes exploitation to Linen Typhoon, Violet Typhoon and Storm-2603 Tue, 22 Jul 2025 00:00:00 GMT critical Storm-2603 deployed Warlock ransomware. Source: https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ Status: closed, patched [critical] ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706): CISA adds CVE-2025-49704 and CVE-2025-49706 to KEV https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770 toolshell-sharepoint-cve-2025-53770:2025-07-22:CISA adds CVE-2025-49704 and CVE-2025-49706 to KEV Tue, 22 Jul 2025 00:00:00 GMT critical Status: closed, patched [critical] ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706): CISA adds CVE-2025-53770 to KEV and publishes guidance https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770 toolshell-sharepoint-cve-2025-53770:2025-07-20:CISA adds CVE-2025-53770 to KEV and publishes guidance Sun, 20 Jul 2025 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilities Status: closed, patched [critical] ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706): Microsoft publishes customer guidance for CVE-2025-53770 https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770 toolshell-sharepoint-cve-2025-53770:2025-07-19:Microsoft publishes customer guidance for CVE-2025-53770 Sat, 19 Jul 2025 00:00:00 GMT critical Apply updates, enable AMSI Full Mode, deploy Defender/EDR, rotate ASP.NET machine keys and restart IIS. Source: https://www.microsoft.com/en-us/msrc/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770 Status: closed, patched [critical] ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706): Eye Security observes large-scale exploitation of on-prem SharePoint servers https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770 toolshell-sharepoint-cve-2025-53770:2025-07-18:Eye Security observes large-scale exploitation of on-prem SharePoint servers Fri, 18 Jul 2025 00:00:00 GMT critical Later clarified as the original ToolShell chain (CVE-2025-49706 + CVE-2025-49704). Source: https://research.eye.security/sharepoint-under-siege/ Status: closed, patched [high] Microsoft Windows: Microsoft Windows External Control of File Name or Path Vulnerability: CISA added CVE-2025-33053 to the KEV catalog (due 2025-07-01). https://pwn.watch/i/microsoft-windows-cve-2025-33053 microsoft-windows-cve-2025-33053:2025-06-10:CISA added CVE-2025-33053 to the KEV catalog (due 2025-07-01). Tue, 10 Jun 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30397 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 microsoft-windows-cve-2025-30397:2025-05-13:CISA added CVE-2025-30397 to the KEV catalog (due 2025-06-03). Tue, 13 May 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30400 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 microsoft-windows-cve-2025-30397:2025-05-13:CISA added CVE-2025-30400 to the KEV catalog (due 2025-06-03). Tue, 13 May 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32701 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 microsoft-windows-cve-2025-30397:2025-05-13:CISA added CVE-2025-32701 to the KEV catalog (due 2025-06-03). Tue, 13 May 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32706 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 microsoft-windows-cve-2025-30397:2025-05-13:CISA added CVE-2025-32706 to the KEV catalog (due 2025-06-03). Tue, 13 May 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32709 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 microsoft-windows-cve-2025-30397:2025-05-13:CISA added CVE-2025-32709 to the KEV catalog (due 2025-06-03). Tue, 13 May 2025 00:00:00 GMT high Status: closed, patched [medium] Microsoft Windows: Windows NTLM Hash Disclosure Spoofing Vulnerability: CISA added CVE-2025-24054 to the KEV catalog (due 2025-05-08). https://pwn.watch/i/microsoft-windows-cve-2025-24054 microsoft-windows-cve-2025-24054:2025-04-17:CISA added CVE-2025-24054 to the KEV catalog (due 2025-05-08). Thu, 17 Apr 2025 00:00:00 GMT medium Status: closed, patched [critical] Microsoft Windows: Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability: CISA added CVE-2025-29824 to the KEV catalog (due 2025-04-29). https://pwn.watch/i/microsoft-windows-cve-2025-29824 microsoft-windows-cve-2025-29824:2025-04-08:CISA added CVE-2025-29824 to the KEV catalog (due 2025-04-29). Tue, 08 Apr 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24983 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-24983 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24984 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-24984 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24985 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-24985 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24991 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-24991 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-24993 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-24993 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633): CISA added CVE-2025-26633 to the KEV catalog (due 2025-04-01). https://pwn.watch/i/microsoft-windows-cve-2025-24983 microsoft-windows-cve-2025-24983:2025-03-11:CISA added CVE-2025-26633 to the KEV catalog (due 2025-04-01). Tue, 11 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Microsoft Windows: Windows Win32k Improper Resource Shutdown or Release Vulnerability: CISA added CVE-2018-8639 to the KEV catalog (due 2025-03-24). https://pwn.watch/i/microsoft-windows-cve-2018-8639 microsoft-windows-cve-2018-8639:2025-03-03:CISA added CVE-2018-8639 to the KEV catalog (due 2025-03-24). Mon, 03 Mar 2025 00:00:00 GMT critical Status: closed, patched [high] Microsoft Partner Center: Partner Center Improper Access Control Vulnerability: CISA added CVE-2024-49035 to the KEV catalog (due 2025-03-18). https://pwn.watch/i/microsoft-partner-center-cve-2024-49035 microsoft-partner-center-cve-2024-49035:2025-02-25:CISA added CVE-2024-49035 to the KEV catalog (due 2025-03-18). Tue, 25 Feb 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Power Pages: Power Pages Improper Access Control Vulnerability: CISA added CVE-2025-24989 to the KEV catalog (due 2025-03-14). https://pwn.watch/i/microsoft-power-pages-cve-2025-24989 microsoft-power-pages-cve-2025-24989:2025-02-21:CISA added CVE-2025-24989 to the KEV catalog (due 2025-03-14). Fri, 21 Feb 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21391 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/microsoft-windows-cve-2025-21391 microsoft-windows-cve-2025-21391:2025-02-11:CISA added CVE-2025-21391 to the KEV catalog (due 2025-03-04). Tue, 11 Feb 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418): CISA added CVE-2025-21418 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/microsoft-windows-cve-2025-21391 microsoft-windows-cve-2025-21391:2025-02-11:CISA added CVE-2025-21418 to the KEV catalog (due 2025-03-04). Tue, 11 Feb 2025 00:00:00 GMT high Status: closed, patched [critical] Microsoft Office Outlook: Outlook Improper Input Validation Vulnerability: CISA added CVE-2024-21413 to the KEV catalog (due 2025-02-27). https://pwn.watch/i/microsoft-office-outlook-cve-2024-21413 microsoft-office-outlook-cve-2024-21413:2025-02-06:CISA added CVE-2024-21413 to the KEV catalog (due 2025-02-27). Thu, 06 Feb 2025 00:00:00 GMT critical Status: closed, patched [high] Microsoft .NET Framework: .NET Framework Information Disclosure Vulnerability: CISA added CVE-2024-29059 to the KEV catalog (due 2025-02-25). https://pwn.watch/i/microsoft-net-framework-cve-2024-29059 microsoft-net-framework-cve-2024-29059:2025-02-04:CISA added CVE-2024-29059 to the KEV catalog (due 2025-02-25). Tue, 04 Feb 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 3 exploited vulnerabilities (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335): CISA added CVE-2025-21333 to the KEV catalog (due 2025-02-04). https://pwn.watch/i/microsoft-windows-cve-2025-21333 microsoft-windows-cve-2025-21333:2025-01-14:CISA added CVE-2025-21333 to the KEV catalog (due 2025-02-04). Tue, 14 Jan 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 3 exploited vulnerabilities (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335): CISA added CVE-2025-21334 to the KEV catalog (due 2025-02-04). https://pwn.watch/i/microsoft-windows-cve-2025-21333 microsoft-windows-cve-2025-21333:2025-01-14:CISA added CVE-2025-21334 to the KEV catalog (due 2025-02-04). Tue, 14 Jan 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows: 3 exploited vulnerabilities (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335): CISA added CVE-2025-21335 to the KEV catalog (due 2025-02-04). https://pwn.watch/i/microsoft-windows-cve-2025-21333 microsoft-windows-cve-2025-21333:2025-01-14:CISA added CVE-2025-21335 to the KEV catalog (due 2025-02-04). Tue, 14 Jan 2025 00:00:00 GMT high Status: closed, patched [high] Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference: CISA added CVE-2024-35250 to the KEV catalog (federal deadline 2025-01-06) https://pwn.watch/i/microsoft-windows-cve-2024-35250 microsoft-windows-cve-2024-35250:2024-12-16:CISA added CVE-2024-35250 to the KEV catalog (federal deadline 2025-01-06) Mon, 16 Dec 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow: CVE-2024-49138 published https://pwn.watch/i/microsoft-windows-cve-2024-49138 microsoft-windows-cve-2024-49138:2024-12-10:CVE-2024-49138 published Tue, 10 Dec 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-49138 Status: closed, patched [high] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow: CISA added CVE-2024-49138 to the KEV catalog (federal deadline 2024-12-31) https://pwn.watch/i/microsoft-windows-cve-2024-49138 microsoft-windows-cve-2024-49138:2024-12-10:CISA added CVE-2024-49138 to the KEV catalog (federal deadline 2024-12-31) Tue, 10 Dec 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft November 2024: 2 actively exploited zero-days: CVE-2024-43451 published https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 microsoft-zero-days-november-2024-43451-49039:2024-11-12:CVE-2024-43451 published Tue, 12 Nov 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-43451 Status: closed, patched [high] Microsoft November 2024: 2 actively exploited zero-days: CVE-2024-49039 published https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 microsoft-zero-days-november-2024-43451-49039:2024-11-12:CVE-2024-49039 published Tue, 12 Nov 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-49039 Status: closed, patched [high] Microsoft November 2024: 2 actively exploited zero-days: CISA added CVE-2024-43451 to the KEV catalog (federal deadline 2024-12-03) https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 microsoft-zero-days-november-2024-43451-49039:2024-11-12:CISA added CVE-2024-43451 to the KEV catalog (federal deadline 2024-12-03) Tue, 12 Nov 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft November 2024: 2 actively exploited zero-days: CISA added CVE-2024-49039 to the KEV catalog (federal deadline 2024-12-03) https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 microsoft-zero-days-november-2024-43451-49039:2024-11-12:CISA added CVE-2024-49039 to the KEV catalog (federal deadline 2024-12-03) Tue, 12 Nov 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft SharePoint Deserialization: CISA added CVE-2024-38094 to the KEV catalog (federal deadline 2024-11-12) https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094 microsoft-sharepoint-cve-2024-38094:2024-10-22:CISA added CVE-2024-38094 to the KEV catalog (federal deadline 2024-11-12) Tue, 22 Oct 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft Windows Kernel TOCTOU Race Condition: CISA added CVE-2024-30088 to the KEV catalog (federal deadline 2024-11-05) https://pwn.watch/i/microsoft-windows-cve-2024-30088 microsoft-windows-cve-2024-30088:2024-10-15:CISA added CVE-2024-30088 to the KEV catalog (federal deadline 2024-11-05) Tue, 15 Oct 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft October 2024: 2 actively exploited zero-days: CVE-2024-43572 published https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573 microsoft-zero-days-october-2024-43572-43573:2024-10-08:CVE-2024-43572 published Tue, 08 Oct 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-43572 Status: closed, patched [high] Microsoft October 2024: 2 actively exploited zero-days: CVE-2024-43573 published https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573 microsoft-zero-days-october-2024-43572-43573:2024-10-08:CVE-2024-43573 published Tue, 08 Oct 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-43573 Status: closed, patched [high] Microsoft October 2024: 2 actively exploited zero-days: CISA added CVE-2024-43572 to the KEV catalog (federal deadline 2024-10-29) https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573 microsoft-zero-days-october-2024-43572-43573:2024-10-08:CISA added CVE-2024-43572 to the KEV catalog (federal deadline 2024-10-29) Tue, 08 Oct 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft October 2024: 2 actively exploited zero-days: CISA added CVE-2024-43573 to the KEV catalog (federal deadline 2024-10-29) https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573 microsoft-zero-days-october-2024-43572-43573:2024-10-08:CISA added CVE-2024-43573 to the KEV catalog (federal deadline 2024-10-29) Tue, 08 Oct 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Microsoft SQL Server Reporting Services Remote Code Execution: CISA added CVE-2020-0618 to the KEV catalog (federal deadline 2024-10-09) https://pwn.watch/i/microsoft-sql-server-cve-2020-0618 microsoft-sql-server-cve-2020-0618:2024-09-18:CISA added CVE-2020-0618 to the KEV catalog (federal deadline 2024-10-09) Wed, 18 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft Windows MSHTML Platform Spoofing: CISA added CVE-2024-43461 to the KEV catalog (federal deadline 2024-10-07) https://pwn.watch/i/microsoft-windows-cve-2024-43461 microsoft-windows-cve-2024-43461:2024-09-16:CISA added CVE-2024-43461 to the KEV catalog (federal deadline 2024-10-07) Mon, 16 Sep 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft Windows MSHTML Platform Spoofing: CVE-2024-43461 published https://pwn.watch/i/microsoft-windows-cve-2024-43461 microsoft-windows-cve-2024-43461:2024-09-10:CVE-2024-43461 published Tue, 10 Sep 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-43461 Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CVE-2024-38014 published https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CVE-2024-38014 published Tue, 10 Sep 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38014 Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CVE-2024-38217 published https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CVE-2024-38217 published Tue, 10 Sep 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38217 Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CVE-2024-38226 published https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CVE-2024-38226 published Tue, 10 Sep 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38226 Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CISA added CVE-2024-38014 to the KEV catalog (federal deadline 2024-10-01) https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CISA added CVE-2024-38014 to the KEV catalog (federal deadline 2024-10-01) Tue, 10 Sep 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CISA added CVE-2024-38217 to the KEV catalog (federal deadline 2024-10-01) https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CISA added CVE-2024-38217 to the KEV catalog (federal deadline 2024-10-01) Tue, 10 Sep 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft September 2024: 3 actively exploited zero-days: CISA added CVE-2024-38226 to the KEV catalog (federal deadline 2024-10-01) https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more microsoft-zero-days-september-2024-38014-38217-and-1-more:2024-09-10:CISA added CVE-2024-38226 to the KEV catalog (federal deadline 2024-10-01) Tue, 10 Sep 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft Exchange Server Information Disclosure: CISA added CVE-2021-31196 to the KEV catalog (federal deadline 2024-09-11) https://pwn.watch/i/microsoft-exchange-server-cve-2021-31196 microsoft-exchange-server-cve-2021-31196:2024-08-21:CISA added CVE-2021-31196 to the KEV catalog (federal deadline 2024-09-11) Wed, 21 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38106 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38106 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38106 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38107 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38107 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38107 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38178 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38178 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38178 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38189 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38189 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38189 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38193 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38193 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38193 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CVE-2024-38213 published https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CVE-2024-38213 published Tue, 13 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38213 Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CISA added CVE-2024-38106 to the KEV catalog (federal deadline 2024-09-03) https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CISA added CVE-2024-38106 to the KEV catalog (federal deadline 2024-09-03) Tue, 13 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CISA added CVE-2024-38107 to the KEV catalog (federal deadline 2024-09-03) https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CISA added CVE-2024-38107 to the KEV catalog (federal deadline 2024-09-03) Tue, 13 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CISA added CVE-2024-38178 to the KEV catalog (federal deadline 2024-09-03) https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CISA added CVE-2024-38178 to the KEV catalog (federal deadline 2024-09-03) Tue, 13 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Microsoft August 2024: 6 actively exploited zero-days: CISA added CVE-2024-38189 to the KEV catalog (federal deadline 2024-09-03) https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more microsoft-zero-days-august-2024-38106-38107-and-4-more:2024-08-13:CISA added CVE-2024-38189 to the KEV catalog (federal deadline 2024-09-03) Tue, 13 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched