Scworld CISA Warns of Exploits in Chrome, Zimbra, ThreatSonar, and ActiveX Module
Article Content
Browse articles
The Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities affecting Google Chrome, Zimbra, ThreatSonar, and a Windows ActiveX module to its Known Exploited Vulnerabilities list. The vulnerabilities include a high-severity Chrome use-after-free bug (CVE-2026-2441) and an 18-year-old vulnerability (CVE-2008-0015) that is currently being exploited. Ongoing attacks have been reported, and CISA's reduced capacity is causing delays in response efforts.
Ask AI about this cluster
Answers cite the sources they use
Updated 205d ago How this analysis works
Timeline
2026-02-17
CVE-2008-0015 added to CISA KEV (active exploitation)
2026-02-17
CVE-2026-2441 added to CISA KEV (active exploitation)
2026-02-17
CVE-2020-7796 added to CISA KEV (active exploitation)
2026-02-17
CVE-2024-7694 added to CISA KEV (active exploitation)
2026-02-19
CISA warns of ongoing attacks exploiting multiple vulnerabilities
More articles in this cluster (2)
Following this threat?
Track Dogkild Worm and CVE-2008-0015 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Citrix NetScaler Critical Vulnerabilities Exploited: Urgent Patching Required Citrix NetScaler ADC and Gateway products are affected by critical vulnerabilities CVE-2026-88771 and CVE-2026-88772, both assigned a CVSS score of 9.5. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on September 27, 2026, and mandated…
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…