Visual Basic for Applications
No CISA KEV deadline is open. CISA last added a Visual Basic for Applications CVE on 13 Apr.
Tracked since 13 Apr · latest article Tue 14 Apr · RSS
Exploited, by due date
CSV downloadDeadlines passed
4 articles from 3 outlets since 13 Apr; the latest 195 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 14 Apr · 08:11 UTC | Security Affairs | CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog |
| Tue 14 Apr · 06:31 UTC | The Hacker News | CISA adds six KEV flaws amid active Fortinet exploits |
| Mon 13 Apr · 22:05 UTC | CISA | CISA warns of exploited VBA flaw CVE-2012-1854, urges patch |
| Mon 13 Apr · 21:21 UTC | CISA | CISA warns of active exploit in old VBA flaw CVE-2012-1854 |
Who reported 3 outlets, last 12 months
- CISA2
- Security Affairs1
- The Hacker News1
- CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV CatalogSecurity Affairs
- CISA adds six KEV flaws amid active Fortinet exploitsThe Hacker News
- CISA warns of exploited VBA flaw CVE-2012-1854, urges patchCISA · official notice
- CISA warns of active exploit in old VBA flaw CVE-2012-1854CISA · official notice
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.