Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2023-28229
Assessment context
CISA deadline passed 1096 days ago
Weekly briefing
Week 43 · 23 Oct – 29 Oct 2023 UTC · assess the changes, then plan the next dates.
All dated changes in this period
4 source records · 4 groupsSecurityVMware Tools
VMSA-2023-0024:VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it high
SecurityCisco
Cisco IOS XE Web UI Command Injection Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2023-20273
Assessment context
CISA lists it as exploited
SecurityVMware vCenter Server
VMSA-2023-0023:VMware vCenter Server updates address out-of-bounds write and information disclosure vulnerabilities
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it critical
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.