The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog by adding four security flaws that are currently being actively exploited in the wild. This action highlights the urgency for organizations to address these vulnerabilities promptly to mitigate potential cyber threats.

Among the listed vulnerabilities is CVE-2026-2441, a use-after-free flaw in Google Chrome with a CVSS score of 8.8, which could allow remote attackers to exploit heap memory issues. The inclusion in the KEV catalog serves as a critical alert for users and administrators to apply patches and implement security measures to protect against ongoing attacks.

Key Takeaways

  • CISA has added four security flaws to its Known Exploited Vulnerabilities catalog due to active exploitation.
  • One of the vulnerabilities is CVE-2026-2441, a high-severity use-after-free issue in Google Chrome.
  • Organizations should prioritize patching these vulnerabilities to reduce cyber risk.
  • The KEV update underscores the importance of timely vulnerability management in cybersecurity.

CVEs Mentioned

CVE-2026-2441

Source: The Hacker News