Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 721–744 of 1,769

CISA KEVAdded Dec 7, 2023

CVE-2023-41265: Qlik Sense HTTP Tunneling Vulnerability

Qlik · Sense

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Federal remediation due Dec 28, 2023Ransomware use: Known

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 5, 2023

CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Qualcomm · Multiple Chipsets

Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Federal remediation due Dec 26, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 5, 2023

CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Qualcomm · Multiple Chipsets

Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Federal remediation due Dec 26, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 5, 2023

CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.

Federal remediation due Dec 26, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 5, 2023

CVE-2022-22071: Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.

Federal remediation due Dec 26, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 4, 2023

CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products…

Federal remediation due Dec 25, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Dec 4, 2023

CVE-2023-42916: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products…

Federal remediation due Dec 25, 2023Ransomware use: Not confirmed by CISA

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 30, 2023

CVE-2023-6345: Google Skia Integer Overflow Vulnerability

Google · Chromium Skia

Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

Federal remediation due Dec 21, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 30, 2023

CVE-2023-49103: ownCloud graphapi Information Disclosure Vulnerability

ownCloud · ownCloud graphapi

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

Federal remediation due Dec 21, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 21, 2023

CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability

GNU · GNU C Library

GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

Federal remediation due Dec 12, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 16, 2023

CVE-2023-36584: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

Federal remediation due Dec 7, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 16, 2023

CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability

Sophos · Web Appliance

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

Federal remediation due Dec 7, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 16, 2023

CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.

Federal remediation due Dec 7, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 14, 2023

CVE-2023-36036: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.

Federal remediation due Dec 5, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 14, 2023

CVE-2023-36033: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

Federal remediation due Dec 5, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 14, 2023

CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

Federal remediation due Dec 5, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-47246: SysAid Server Path Traversal Vulnerability

SysAid · SysAid Server

SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.

Federal remediation due Dec 4, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is…

Federal remediation due Nov 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is…

Federal remediation due Nov 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is…

Federal remediation due Nov 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to…

Federal remediation due Nov 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 13, 2023

CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS

Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial…

Federal remediation due Nov 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Nov 8, 2023

CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability

IETF · Service Location Protocol (SLP)

The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

Federal remediation due Nov 29, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

View in the CISA KEV catalog →

CISA KEVAdded Nov 7, 2023

CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · Confluence Data Center and Server

Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.

Federal remediation due Nov 28, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Nov 8, 2026, 8:25 AM GMT+0000Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 601–624 of 1,013