Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Apple OS X Buffer Overflow is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
WordPress plugin exposure with public exploit material — mass targeting of internet-facing CMS installs is common once PoCs circulate.
Critical exposure
New critical Cisco Rv340 Firmware DoS (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows SAM Local Privilege Escalation
Microsoft SMBv3 Remote Code Execution
Jenkins Stapler Web Framework Deserialization of Untrusted Data
Oracle Corporation WebLogic Server Remote Code Execution
Apache Struts 1 Improper Input Validation
Microsoft Windows Shell (.lnk) Remote Code Execution
Microsoft Office Remote Code Execution
Microsoft Win32k Privilege Escalation
Microsoft SMBv1 Remote Code Execution
Microsoft SMBv1 Remote Code Execution
Apache ActiveMQ Improper Input Validation
Microsoft HTTP.sys Remote Code Execution
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_scc...
Nothing flagged in this category for this digest.
A Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the f...
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the f...
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the f...
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the f...
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the f...
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int...
Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform col...
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.