Apr 23, 2024 Cyber Threat Intelligence

Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.

Daily summary

  • Microsoft Windows added to CISA KEV — confirmed in-the-wild exploitation.
  • 4 new critical disclosures — review patch status on exposed services.

Top threats today

Three highest-priority changes — analyst brief, not a CVE dump.

Critical active threat

CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation

  • Actively exploited (CISA KEV)
  • Listed on CISA KEV
  • Potential privilege escalation to admin/root

Microsoft Windows Privilege Escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.

Critical exposure

CVE-2024-32658 FreeRDP is a free implementation of the Remote Desktop Protocol.

  • CVSS 9.8

New critical Fedoraproject Fedora Out-of-Bounds Write (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2024-32659 FreeRDP is a free implementation of the Remote Desktop Protocol.

  • CVSS 9.8

New critical Fedoraproject Fedora Out-of-Bounds Write (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Active exploitation

CISA KEV — confirmed in-the-wild exploitation.

Microsoft Windows Print Spooler Privilege Escalation

View KEV additions

Exploit & PoC activity

Nothing flagged in this category for this digest.

View new exploit links

Exploitation dynamics

Nothing flagged in this category for this digest.

See EPSS increases

New critical disclosures

CVE-2024-21511 CVSS 9.8

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone param...

CVE-2024-32658 CVSS 9.8

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVE-2024-32659 CVSS 9.8

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVE-2024-33215 CVSS 9.8

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip...

View critical disclosures

cvelogic Threat Intelligence