Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft Internet Explorer Use-After-Free is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Totolink A6000r Firmware Command Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Microsoft Groupme privilege escalation (CVSS 9.6) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Twilio Authy Information Disclosure
Microsoft Internet Explorer Use-After-Free
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
On versions before 2.1.4, session is not invalidated after logout.
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convinci...
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd fun...