Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Adobe Flash Player privilege escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Adobe Flash Player Double Free Vulnerablity
Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player Incorrect Default Permissions
Adobe Flash Player Code Execution
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.
VMware vCenter Server Heap-Based Buffer Overflow
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder super...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder super...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wp...
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment.
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass