CVE-2021-36948

An unpatched privilege escalation flaw in Windows Update Medic Service was actively exploited in the wild, allowing attackers to escalate privileges on Windows systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2012-3152

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-30563

A type confusion vulnerability in Google Chromium V8 allowed remote attackers to exploit heap corruption via crafted HTML pages, affecting multiple Chromium-based browsers.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-36742

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2012-0158

Microsoft MSCOMCTL.OCX contained a remote code execution vulnerability that allowed attackers to take full control of affected systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-36741

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-30632

An out-of-bounds write vulnerability in Google Chromium V8 allowed remote attackers to exploit heap corruption via crafted HTML pages, affecting multiple Chromium-based browsers.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-30633

A use-after-free flaw in Chromium's Indexed DB API allowed sandbox escapes after a renderer compromise, but required prior compromise and was not a zero-day.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2010-5326

SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-31199

Microsoft Enhanced Cryptographic Provider privilege escalation vulnerability (CVE-2021-31199) was actively exploited in the wild, allowing attackers to escalate privileges on affected systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider privilege escalation vulnerability (CVE-2021-31201) was actively exploited in the wild, allowing attackers to escalate privileges on affected systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-34448

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-33771

An unpatched Windows kernel privilege escalation vulnerability was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-33742

A remote code execution vulnerability in Microsoft Windows MSHTML was actively exploited in the wild, allowing attackers to execute arbitrary code on unpatched systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-33739

A privilege escalation flaw in Microsoft's Desktop Window Manager was actively exploited in the wild, allowing attackers to escalate privileges on Windows systems.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-31979

An unpatched Windows kernel privilege escalation vulnerability was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2021-31956

An unpatched privilege escalation flaw in Windows NTFS allowed attackers to gain elevated access via a crafted application.

▸ DO  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

CVE-2026-13782

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-40141

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited pr

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-40139

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, i

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-13775

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-14104

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

▸ DO  Remote code execution — patch the affected products on priority.

CVE-2026-13776

Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-8655

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2017-17674

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code ex

▸ DO  Remote code execution — patch the affected products on priority.

CVE-2026-14109

Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-14120

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-13780

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-13781

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-13785

Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-14101

Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-14106

Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-41106

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-9074

IBM API Connect versions 10.0.8.0–10.0.8.9 and 12.1.0.0–12.1.0.3 contain an unauthenticated SQL injection vulnerability in the password reset functionality.

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-11720

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-76310

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-16919

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-76312

▸ DO  Critical severity — schedule patching of the affected products.

CVE-2026-76311

▸ DO  Critical severity — schedule patching of the affected products.