Home
» Risk & Exploitation
» Daily threat intelligence
» Aug 12, 2025
Aug 12, 2025 Cyber Threat Intelligence
Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
Microsoft Internet Explorer: 2 CVEs added to CISA KEV today.
Archive Zip Antivirus Engine — exploitation likelihood rose sharply (EPSS 14% → 40% · rising (+26%)).
10 new critical disclosures — review patch status on exposed services.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
CVE-2007-0671
Microsoft Office Excel Remote Code Execution
Actively exploited (CISA KEV)
Listed on CISA KEV
Remote code execution exposure
Microsoft Office RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Emerging exploitation risk
CVE-2004-0934
Archive Zip Antivirus Engine
Exploitation likelihood sharply increased
EPSS 14% → 40% · rising (+26%)
Archive Zip Antivirus Engine: EPSS 14% → 40% · rising (+26%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Critical exposure
New critical Wegia Path Traversal (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Active exploitation
CISA KEV — confirmed in-the-wild exploitation.
RARLAB WinRAR Path Traversal
Microsoft Internet Explorer Resource Management Errors
Microsoft Office Excel Remote Code Execution
View KEV additions
Exploitation dynamics
Archive Zip Antivirus Engine
Motion Project Motion DoS
See EPSS increases
New critical disclosures
Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authen...
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIE...
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via net...
Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Kanboard is project management software that focuses on the Kanban methodology.
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.
View critical disclosures
cvelogic
Threat Intelligence