CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild.
The vulnerabilities are as follows -

CVE-2023-36584 (CVSS score: 5.4) - Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability
CVE-2023-1671 (CVSS score: 9.8) -

agency bypass bypass vulnerability catalog cisa cve cve-2023-36584 cvss cybersecurity exploitation exploited exploited vulnerabilities feature flaws infrastructure infrastructure security kev kev catalog known exploited known exploited vulnerabilities mark microsoft microsoft windows motw score security security feature bypass security flaws vulnerabilities vulnerability web windows