Back Gbhackers

CISA Flags Actively Exploited Windows Video ActiveX Control RCE in KEV List

Gbhackers •Divya • February 18, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability affecting Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog. This specific security flaw, identified as CVE-2008-0015, impacts the Windows Video ActiveX Control and allows for remote code execution (RCE). The agency updated the catalog on February 17, 2026, confirming that evidence […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds CVE-2008-0015 to KEV Catalog Due to Active Exploitation CISA has added the long-standing Microsoft Windows vulnerability CVE-2008-0015 to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation. This flaw, affecting the Windows Video ActiveX Control, allows for remote code execution (RCE) and poses a significant risk to users. The vulnerability was first disclosed in 2008 and has now been confirmed as actively exploited as of February 17, 2026. 2 sources 45

Extracted Entities

CISA Flags Actively Exploited Windows Video ActiveX Control RCE in KEV List

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)