Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

2,030 alerts · page 4 of 102

  1. Critical (CVSS 9+) Published

    CVE-2026-88218 Windows DNS Remote Code Execution Vulnerability

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: Microsoft windows 10 1607, Microsoft Windows Server 2016, Microsoft windows 10 1809 and 23 more

    Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

  2. Critical (CVSS 9+) Published

    CVE-2026-109454 Microsoft Office SharePoint Spoofing Vulnerability

    CriticalCVSS 9.0

    Exploit status: No public exploit known

    Affects: Microsoft sharepoint server, Microsoft SharePoint Server Subscription Edition

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  5. Critical (CVSS 9+) Published

    CVE-2026-61887 Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and i...

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined w...

  6. Critical (CVSS 9+) Published

    CVE-2026-61473 Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with....

    CriticalCVSS 9.2

    Exploit status: No public exploit known

    Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...

  7. Critical (CVSS 9+) Published

    CVE-2026-44685 Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software ad...

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable...

  8. CISA KEV addition Published

    CVE-2026-125350 Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    HighCVSS 8.8 CISA KEV added 2026-11-10 · due 2026-11-24 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: debian/chromium, Google Chrome

    Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  9. Critical (CVSS 9+) Published

    CVE-2026-125347 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML p...

    CriticalCVSS 9.6

    Exploit status: No public exploit known

    Affects: Google Chrome

    Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  10. Critical (CVSS 9+) Published

    CVE-2026-63011 GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: Intermesh groupoffice

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string (tpl parameter) that is passed without restrict...

  11. Critical (CVSS 9+) Published

    CVE-2026-61547 rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: alanxz rabbitmq-c

    rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp_send_frame() API is used to serialize an oversized AMQP_FRAME_BODY. The issue occurs because amqp_frame_to_bytes() copies frame.p...

  12. Critical (CVSS 9+) Published

    CVE-2026-121683 Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: Ivanti Cloud Services Application

    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

  15. Critical (CVSS 9+) Published

    CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: aptabase/aptabase

    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTH_SECRET. Attackers can enumerate registered e-mails via /api/_auth/signin, forge HS256 JWTs redeemed...

  16. Critical (CVSS 9+) Published

    CVE-2026-125757 mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: mailcow-dockerized

    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with an os.execute default...

  19. Critical (CVSS 9+) Published

    CVE-2026-124903 Sandbox escape due to use-after-free in the IPC component

    CriticalCVSS 9.6

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird

    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).