CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added multiple CVEs to its Known Exploited Vulnerabilities (KEV) Catalog (per BOD 22-01) based on evidence of active exploitation. The additions span products from Microsoft, Adobe, Fortinet, Citrix, Ivanti, Google, TrueConf and others, and include vulnerabilities such as remote code execution, use‑after‑free, deserialization, SQL injection, prototype pollution, out‑of‑bounds read, code injection, and improper access control. CISA urges timely remediation by agencies and strongly recommends organizations prioritize patching these KEV entries.