Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft Windows Use-After-Free is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical AMI MegaRAC SPx Auth Bypass (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Apple Multiple Products Out-of-Bounds Write (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows Win32k Use-After-Free
Microsoft Windows NTFS Information Disclosure
Microsoft Windows Fast FAT File System Driver Integer Overflow
Microsoft Windows NTFS Out-Of-Bounds Read
Microsoft Windows NTFS Heap-Based Buffer Overflow
Microsoft Windows Management Console (MMC) Improper Neutralization
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
AMI MegaRAC SPx Authentication Bypass by Spoofing
A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning with SZVS8, SZVS9, SZVS0 or SZVSN and the...
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to...
Apple Multiple Products WebKit Out-of-Bounds Write
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions...
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions...
Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to...