Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Qualcomm Multiple Chipsets Use-After-Free is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Apache Ofbiz RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Qualcomm Multiple Chipsets Use-After-Free
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset
Qualcomm Multiple Chipsets Integer Overflow
Qualcomm Multiple Chipsets Use-After-Free
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
xinhu xinhuoa 2.2.1 contains a File upload vulnerability.
Pre-auth RCE in Apache Ofbiz 18.12.09.
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session...
Unitronics Vision PLC and HMI Insecure Default Password