Home
» Risk & Exploitation
» Daily threat intelligence
» Aug 19, 2025
Aug 19, 2025 Cyber Threat Intelligence
Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
Adobe Edge — exploitation likelihood rose sharply (EPSS 28% → 40% · rising (+12%)).
10 new critical disclosures — review patch status on exposed services.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Emerging exploitation risk
Exploitation likelihood sharply increased
EPSS 28% → 40% · rising (+12%)
Adobe Edge: EPSS 28% → 40% · rising (+12%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Emerging exploitation risk
Exploitation likelihood sharply increased
EPSS 28% → 40% · rising (+12%)
Adobe Edge: EPSS 28% → 40% · rising (+12%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Critical exposure
CVE-2025-9179
Mozilla Firefox Memory Corruption
New critical Mozilla Firefox Memory Corruption (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Active exploitation
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
View KEV additions
New critical disclosures
An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/rese...
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on th...
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's...
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport.
GenX_FX is an advance IA trading platform that will focus on forex trading.
DeepChat is a smart assistant that connects powerful AI to your personal world.
flaskBlog is a blog app built with Flask.
Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads.
An attacker was able to perform memory corruption in the GMP process which processes encrypted media.
Memory safety bugs present in Firefox 141 and Thunderbird 141.
View critical disclosures
cvelogic
Threat Intelligence