Flaws added in February 2024
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in February 2024. For the newest, see Exploited flaws.
In February 2024, CISA added 9 flaws to its list of vulnerabilities being used in attacks, 3 of them in things people have at home; 4 have been used by ransomware gangs. Most came from Microsoft (4), ConnectWise (1) and Cisco (1).[1]
Five of the nine let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in February 2024, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-29360At work |
Microsoft Streaming Service. Someone who already has a foothold can use Microsoft Streaming Service to take full control of the machine. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-1709† Used in ransomwareAt work |
ConnectWise ScreenConnect. Attackers can get into ConnectWise ScreenConnect without a valid password. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-21410At work |
Microsoft Exchange Server. Someone who already has a foothold can use Microsoft Exchange Server to take full control of the machine. | At work |
CVE-2020-3259† Used in ransomwareAt work |
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). Attackers can read information from Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) that should be private from anywhere, without logging in. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-21412† Used in ransomwareAt home |
Microsoft Windows. Attackers can get past a security protection in Microsoft Windows. | At home |
CVE-2024-21351At home |
Microsoft Windows. Attackers can run their own code on Microsoft Windows. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-43770At work |
Roundcube Webmail. Attackers can run code in the browser of someone using Roundcube Webmail and act as them. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-21762† Used in ransomwareAt work |
Fortinet FortiOS. Attackers can run their own code on Fortinet FortiOS from anywhere, without logging in. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-4762At home |
Chrome and other Chromium browsers. A booby-trapped web page can run an attacker's code through Chrome and other Chromium browsers. | At home |
Companies
The flaws were in six companies’ products; the most were in Microsoft’s (4).
Other months
Every month since CISA started the list; February 2024 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.