Microsoft Office Outlook

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog based on confirmed active exploitation in the wild. The list includes flaws affecting Cisco BroadWorks, multiple Barracuda Networks products, Openwave Messaging Webtop Media Transcoder, Microsoft Office Outlook, and Google Chromium. These vulnerabilities enable attacks such as XML external entity injection, OS command injection, authentication bypass, and use-after-free exploitation. Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize remediation of KEV-listed issues on publicly exposed assets that could grant full system control. CISA encourages all organizations to adopt similar risk-based vulnerability management practices. The agency continues to accept nominations for additional exploited vulnerabilities through its official form.