Oct 7, 2024 Cyber Threat Intelligence
Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
- 9 new critical disclosures — review patch status on exposed services.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
CVE-2024-20100
In wlan driver, there is a possible out of bounds write due to improper input validation.
- CVSS 9.8
- Remote code execution exposure
New critical Google Android RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
CVE-2024-20101
In wlan driver, there is a possible out of bounds write due to improper input validation.
- CVSS 9.8
- Remote code execution exposure
New critical Google Android RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
CVE-2024-20103
In wlan firmware, there is a possible out of bounds write due to improper input validation.
- CVSS 9.8
- Remote code execution exposure
New critical Google Android RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Active exploitation
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
View KEV additions
Exploitation dynamics
Nothing flagged in this category for this digest.
See EPSS increases
New critical disclosures
In wlan driver, there is a possible out of bounds write due to improper input validation.
In wlan driver, there is a possible out of bounds write due to improper input validation.
In wlan firmware, there is a possible out of bounds write due to improper input validation.
Memory corruption while redirecting log file to any file location with any file name.
A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a...
A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a cra...
RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection...
Mecha CMS 3.0.0 is vulnerable to Directory Traversal.
SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote use...
View critical disclosures
cvelogic
Threat Intelligence