Flaws added in April 2024
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in April 2024. For the newest, see Exploited flaws.
In April 2024, CISA added 10 flaws to its list of vulnerabilities being used in attacks, 6 of them in things people have at home; 1 has been used by ransomware gangs. Most came from Microsoft (2), Cisco (2) and D-Link (2).[1]
Seven of the ten let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in April 2024, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-29988At home |
Microsoft SmartScreen Prompt. Attackers can get past a security protection in Microsoft SmartScreen Prompt. | At home |
3 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-4040At work |
CrushFTP. Attackers can run their own code on CrushFTP from anywhere, without logging in. | At work |
CVE-2024-20359At work |
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). Opening a booby-trapped file can let an attacker run their own code through Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). | At work |
CVE-2024-20353At work |
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). Attackers can crash Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) or stop it working from anywhere, without logging in. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-38028At home |
Microsoft Windows. Someone who already has a foothold can use Microsoft Windows to take full control of the machine. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-3400† Used in ransomwareAt work |
Palo Alto Networks PAN-OS. Attackers can run their own code on Palo Alto Networks PAN-OS from anywhere, without logging in. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-3273At home |
D-Link Multiple NAS Devices. Attackers can run their own code on D-Link Multiple NAS Devices. | At home |
CVE-2024-3272At home |
D-Link Multiple NAS Devices. Attackers can run their own code on D-Link Multiple NAS Devices. | At home |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2024-29748At home |
Android Pixel. Someone who already has a foothold can use Android Pixel to take full control of the machine. | At home |
CVE-2024-29745At home |
Android Pixel. Attackers can read information from Android Pixel that should be private. | At home |
Companies
The flaws were in six companies’ products; the most were in Android’s (2).
Other months
Every month since CISA started the list; April 2024 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.