{"metadata": {"vulnerability": "CVE-2024-39891", "count": 40, "kinds": {"milestone": 4, "sighting": 14, "kev": 11, "other": 11}}, "data": [{"timestamp": "2024-07-02T00:00:00Z", "date_only": false, "value": "2024-07-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-39891", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-02T00:00:00Z", "date_only": false, "value": "2024-07-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-39891", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-02T18:15:03Z", "date_only": false, "value": "2024-07-02T18:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VG5J-H7R8-88X8", "record": "GHSA-VG5J-H7R8-88X8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-02T18:15:03.447Z", "date_only": false, "value": "2024-07-02T18:15:03.447", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39891", "record": "FKIE_CVE-2024-39891", "field": "published"}, {"timestamp": "2024-07-02T21:32:15Z", "date_only": false, "value": "2024-07-02T21:32:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VG5J-H7R8-88X8", "record": "GHSA-VG5J-H7R8-88X8", "field": "published"}, {"timestamp": "2024-07-03T22:07:07.423Z", "date_only": false, "value": "2024-07-03T22:07:07.423Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-39891", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "timestamps.asserted_at", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-39891", "field": "timestamps.asserted_at", "uuid": "7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": true, "value": "2024-07-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-39891", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-39891", "field": "evidence.0.details.added_date", "uuid": "7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": true, "value": "2024-07-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "evidence.0.details.date_added", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "timestamps.first_seen_at", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-39891", "field": "timestamps.first_seen_at", "uuid": "7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "status.status_updated_at", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-39891", "field": "status.status_updated_at", "uuid": "7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-39891", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-07-23T03:55:42.678Z", "date_only": false, "value": "2024-07-23T03:55:42.678226Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-39891", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-23T03:55:42.678Z", "date_only": false, "value": "2024-07-23T03:55:42.678226Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39891", "record": "FKIE_CVE-2024-39891", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-23T18:10:03Z", "date_only": false, "value": "2024-07-23T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "ceaea036-9bd7-4526-9320-c79af0d5e80e"}, {"timestamp": "2024-07-24T08:39:10Z", "date_only": false, "value": "2024-07-24T08:39:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5300", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "b6f10839-9b79-4a86-ae32-b71e01144302", "content": "\ud83d\udea8 CISA adds two security flaws to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation evidence\u2014a decade-old Microsoft IE flaw (CVE-2012-4792) and a recent Twilio Authy vulnerability (CVE-2024-39891). \n \nImmediate action is required for Federal agencies to mitigate these threats by August 13, 2024. \n \nRead: https://thehackernews.com/2024/07/cisa-adds-twilio-authy-and-ie-flaws-to.html", "url": "https://t.me/thehackernews/5300"}, {"timestamp": "2024-07-24T09:07:52Z", "date_only": false, "value": "2024-07-24T09:07:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2290", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "3afc4142-1227-4be9-aab2-8799bbcbb991", "content": "CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\nhttps://thehackernews.com/2024/07/cisa-adds-twilio-authy-and-ie-flaws-to.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "url": "https://t.me/KomunitiSiber/2290"}, {"timestamp": "2024-07-24T12:03:55Z", "date_only": false, "value": "2024-07-24T12:03:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/15994", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "47aa81d6-a639-4138-b1d4-7696fa67d547", "content": "The Hacker News\nCISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "url": "https://t.me/tengkorakcybercrewz/15994"}, {"timestamp": "2024-07-24T12:03:55Z", "date_only": false, "value": "2024-07-24T12:03:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/3092", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "873a78a6-6a2d-4099-ac2e-fa2a3a873a58", "content": "The Hacker News\nCISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "url": "https://t.me/tengkorakcybercrewz/3092"}, {"timestamp": "2024-07-24T12:03:59Z", "date_only": false, "value": "2024-07-24T12:03:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/k__A0p-b84thzcP2QMTIHry8ejwBgov0krqQycEKk2X67Q", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "a1385fef-5b2b-4cca-b764-6ed08ae94140"}, {"timestamp": "2024-07-24T13:26:52Z", "date_only": false, "value": "2024-07-24T13:26:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Hk1Metx-yFB56L2o3B2qICxlmJeldY8gBxw9jFlKaGfcJw", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "85f6790e-87c5-4167-87e8-ec68128a6922"}, {"timestamp": "2024-08-02T04:33:11.402Z", "date_only": false, "value": "2024-08-02T04:33:11.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-39891", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": true, "value": "2024-08-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "evidence.0.details.due_date", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-23T02:10:56Z", "date_only": false, "value": "2025-02-23T02:10:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "e4508180-2ae9-40d9-a360-a3debd99c5e9"}, {"timestamp": "2025-08-31T03:01:34Z", "date_only": false, "value": "2025-08-31T03:01:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "930873dd-c3ec-4a56-a3b7-c32a6a0fb853"}, {"timestamp": "2025-10-21T22:55:50.240Z", "date_only": false, "value": "2025-10-21T22:55:50.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-39891", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:50.240Z", "date_only": false, "value": "2025-10-21T22:55:50.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-39891", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:04Z", "date_only": false, "value": "2025-10-22T00:33:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VG5J-H7R8-88X8", "record": "GHSA-VG5J-H7R8-88X8", "field": "modified"}, {"timestamp": "2026-02-02T12:26:32.983Z", "date_only": false, "value": "2026-02-02T12:26:32.983905Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7d0e47d0-8904-44c8-af55-7e1f0024cba4", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "2cd8a14e-ef06-4509-b08b-af164a7f47bd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7d0e47d0-8904-44c8-af55-7e1f0024cba4"}, {"timestamp": "2026-02-02T12:26:32.983Z", "date_only": false, "value": "2026-02-02T12:26:32.983905Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7d0e47d0-8904-44c8-af55-7e1f0024cba4", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "469cb905-bde3-4a44-b0b6-76c4a004601d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7d0e47d0-8904-44c8-af55-7e1f0024cba4"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-39891", "field": "timestamps.recorded_at", "uuid": "b4bcfc3a-06e7-49f6-9d8a-1b73e31d231d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T07:42:58.630Z", "date_only": false, "value": "2026-06-17T07:42:58.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39891", "record": "FKIE_CVE-2024-39891", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:37.897Z", "date_only": false, "value": "2026-06-19T12:46:37.897225Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb7d0e4e-ef98-4426-9e53-5ea71fe0e629", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "ca155120-dafc-4457-8905-b5746dabfe91", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb7d0e4e-ef98-4426-9e53-5ea71fe0e629"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-39891", "field": "timestamps.recorded_at", "uuid": "7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:22.943Z", "date_only": false, "value": "2026-06-23T11:14:22.943614Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "bae719fb-73f3-4500-a8c4-8d5de904a0d4", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7f46d0a4-ba7c-45aa-8fd3-53ee0a4dd20d"}, {"timestamp": "2026-06-23T14:05:55.604Z", "date_only": false, "value": "2026-06-23T14:05:55.604025Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa068fe0-abef-40aa-82ea-27dd91788f25", "record": "CVE-2024-39891", "field": "creation_timestamp", "uuid": "c2015e20-4b86-42b3-93e9-21792d44a1a1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa068fe0-abef-40aa-82ea-27dd91788f25"}]}