Back Cybersecuritynews

CISA Adds Windows Video ActiveX Control RCE Flaw to KEV Catalog Following Active Exploitation

Cybersecuritynews •Abinaya • February 18, 2026

A long-dormant Microsoft Windows vulnerability, CVE-2008-0015, has been added to the Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation in the wild. The flaw, first disclosed more than a decade ago, impacts the Windows Video ActiveX Control component and poses a serious Remote Code Execution (RCE) risk. According to CISA, attackers are exploiting the vulnerability by leveraging maliciously […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds CVE-2008-0015 to KEV Catalog Due to Active Exploitation CISA has added the long-standing Microsoft Windows vulnerability CVE-2008-0015 to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation. This flaw, affecting the Windows Video ActiveX Control, allows for remote code execution (RCE) and poses a significant risk to users. The vulnerability was first disclosed in 2008 and has now been confirmed as actively exploited as of February 17, 2026. 2 sources 45

Extracted Entities

CISA Adds Windows Video ActiveX Control RCE Flaw to KEV Catalog Following Active Exploitation

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)