CISA Adds 7 Fresh Exploits to KEV Catalog

CISA has added seven actively exploited, high-risk CVEs to its KEV Catalog affecting Microsoft (legacy VBE DLL and multiple Windows/Exchange issues), Adobe Acrobat Reader (use-after-free and prototype pollution), and Fortinet FortiClientEMS (unauthenticated SQL injection). The flaws range from local privilege escalation in legacy Office components to remote code execution and unauthenticated server compromise, and the advisory urges immediate patching and version audits to mitigate ongoing attacks.