Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft Word Buffer Overflow is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Pyanxdns Project Pyanxdns Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Api-res-py Project Api-res-py Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
QNAP Photo Station Improper Access Control
QNAP QTS Improper Input Validation
QNAP Photo Station Path Traversal
QNAP Photo Station Path Traversal
Cisco RV Series Routers Deserialization of Untrusted Data
Google Chromium V8 Out-of-Bounds Write
Google Chromium V8 Out-of-Bounds Write
Google Chromium V8 Remote Code Execution
Google Chromium V8 Integer Overflow
Adobe Acrobat and Reader Double Free
Google Chromium V8 Type Confusion
NETGEAR Multiple Devices Buffer Overflow
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits.
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party.
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor.
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/asp...
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /go...
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/...
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.