CISA warns of actively exploited bugs in Chrome and Excel parsing library

CISA added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2023-7101, an RCE in the Perl Spreadsheet::ParseExcel library exploited in the wild (used against Barracuda ESG appliances by UNC4841 to deploy SeaSpy and Saltwater), and CVE-2023-7024, a Chrome WebRTC heap overflow zero-day fixed via emergency updates; vendors have provided patches and CISA issued mitigation guidance and deadlines.