Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft Windows Privilege Escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Intel Data Center Manager privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Vmware Cloud Director Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows SmartScreen Security Feature Bypass
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escala...
VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 1...
A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to...
A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifie...
ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontControll...
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi...
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi...
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code executio...
In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a g...
An improper access control vulnerability exists in RT-AC87U all versions.