Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft DWM Core Library Privilege Escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Arubanetworks Arubaos RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows MSHTML Platform Security Feature Bypass
Microsoft DWM Core Library Privilege Escalation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi...
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi...
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code...
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code...
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthe...
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote cod...
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execu...
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code exec...
The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application pro...
DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands.