Known Exploited Vulnerabilities October 24, 2022 · CISA KEV Catalog

CVE-2020-3433: Cisco Any Connect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-3433 Cisco
Related: CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026
CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026