CISA put two more flaws into its Known Exploited Vulnerabilities catalog on October 28. One is a Linux kernel bug that hands root to any local user. The other is a VMware ESX logging gap that carries a CVSS score of 2.7, which is about as low as a score gets before it stops being worth a CVE. That second one is the interesting entry. A 2.7 doesn't land in KEV by accident. It … [Read more...] about CISA Adds Exploited VMware ESX Logging Flaw and Fragnesia Linux Root Bug to KEV Catalog