Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Microsoft Windows privilege escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Microsoft Azure Conversation Authoring Client Library Deserialization (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows Shell Protection Mechanism Failure
Microsoft MSHTML Framework Protection Mechanism Failure
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision
Microsoft Windows Type Confusion
Microsoft Windows NULL Pointer Dereference
Microsoft Windows Improper Privilege Management
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Server-Side Request Forgery (SSRF) vulnerability in Teknolist Computer Systems Software Publishing Industry and Trade Inc.
CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.
Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specif...
Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, an...
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0) * Prerequisites: *...
ClipBucket v5 is an open source video sharing platform.
EverShop is a TypeScript-first eCommerce platform.
Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations.