CISA Warns of Exploits in Chrome, Zimbra, ThreatSonar, and ActiveX Module

CISA Warns of Exploits in Chrome, Zimbra, ThreatSonar, and ActiveX Module

First seen 19 Feb 2026, 18:17 UTC Heise.DeScworld 81% similarity 34.8

Article Content

Browse articles
ThreatCluster

The Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities affecting Google Chrome, Zimbra, ThreatSonar, and a Windows ActiveX module to its Known Exploited Vulnerabilities list. The vulnerabilities include a high-severity Chrome use-after-free bug (CVE-2026-2441) and an 18-year-old vulnerability (CVE-2008-0015) that is currently being exploited. Ongoing attacks have been reported, and CISA's reduced capacity is causing delays in response efforts.

ThreatCluster AI How this analysis works

Timeline

2026-02-17
CVE-2008-0015 added to CISA KEV (active exploitation)
2026-02-17
CVE-2026-2441 added to CISA KEV (active exploitation)
2026-02-17
CVE-2020-7796 added to CISA KEV (active exploitation)
2026-02-17
CVE-2024-7694 added to CISA KEV (active exploitation)
2026-02-19
CISA warns of ongoing attacks exploiting multiple vulnerabilities

Community

Browse all →