The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two (2) high-severity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation. The first vulnerability, tracked as CVE-2024-1086, involves a use-after-free bug in the Linux kernel’s netfilter component, allowing local attackers to escalate privileges to root and possibly execute arbitrary code. Despite a fix in January 2024, public exploits released in March led to potential compromises. The second vulnerability was reported on by CTIX in the May 31, 2024 FLASH Update. Tracked as CVE-2024-24919, this flaw affects Check Point network gateway security products, enabling attackers to access sensitive information on systems with remote access VPN or mobile access enabled. CISA has mandated that all federal Civilian Executive Branch (FCEB) agencies apply patches for both flaws by no later than June 20, 2024, and suggests implementing mitigation techniques like blocklisting “nf_tables” and using the Linux Kernel Runtime Guard. CTIX urges any administrators affected by these vulnerabilities to patch them immediately to avoid future exploitation.