Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Android Runtime Use-After-Free is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Microsoft Azure Networking privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Microsoft Entra Id privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Android Runtime Use-After-Free
Sitecore Multiple Products Deserialization of Untrusted Data
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check.
WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.
Azure Networking Elevation of Privilege Vulnerability
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
Azure Entra ID Elevation of Privilege Vulnerability
Azure Bot Service Elevation of Privilege Vulnerability
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications.
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be ex...
dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint.