CISA KEV adds six exploited flaws, names Microsoft Outlook, Chromium, BroadWorks

CISA on Nov 10 added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on evidence of active exploitation, and in doing so put federal remediation deadlines on products sold by Microsoft, Google and Cisco, three of the largest public software and networking vendors by market value. The alert, titled “CISA Adds Six Known Exploited Vulnerabilities to Catalog,” sets a federal deadline of Nov 24 for the Microsoft Office Outlook, Google Chromium and Cisco BroadWorks flaws, and a tighter Nov 13 deadline for a chainable pair of Barracuda products.

Key Takeaways CISA on Nov 10 added six actively exploited CVEs to its KEV catalog and set federal remediation deadlines under BOD 2…