Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Google Chromium V8 Use-After-Free is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Fatpipeinc Ipvpn Firmware privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Thinkphp SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Google Chromium V8 Use-After-Free
Microsoft Windows AppX Installer Spoofing
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administ...
Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (ver...
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A
bookstack is vulnerable to Improper Access Control
eLabFTW is an electronic lab notebook manager for research teams.
SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath param...