U.S. CISA adds Microsoft and Adobe flaws to its Known Exploited Vulnerabilities catalog
ID: 2e2152a3-4b71-5455-84d5-bbef36b96586
STIX ID: report--2e2152a3-4b71-5455-84d5-bbef36b96586
Feed Name: Security Affairs
Threat Score
CISA added seven vulnerabilities — including several critical Microsoft and Adobe CVEs (RCEs, use-after-free, and Defender elevation/DoS issues) — to its Known Exploited Vulnerabilities (KEV) catalog and ordered federal agencies to remediate them by June 3, 2026; the report notes high CVSS scores and that an APT (GREF) exploited one Internet Explorer flaw as a zero-day in targeted attacks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.