Critical vulnerabilities, curated daily for security professionals
📊
Archived Security Brief
This curated brief highlights 0 critical vulnerabilities and 3 high-priority updates requiring immediate attention.
How to read this brief
CVSS score (e.g. 9.1) — severity from 0–10. Red marks critical (9+), orange high (7–8.9).
Exploitability — how hard the flaw is to attack, read from the CVSS vector:
Network / Adjacent / Local / Physical — how close an attacker must get. Network means reachable over the internet.
No / Low / High privileges — the access they need first. No privileges means no login required.
No interaction / User interaction — whether a victim has to do something (open a file, click a link). No interaction means fully automatable.
The lower the bar on all three, the easier to exploit at scale — “Network · No privileges · No interaction” is the worst case: hit from anywhere, no credentials, no victim action.
🔴 Actively exploited — confirmed under attack in the wild (CISA’s Known Exploited Vulnerabilities catalog). Prioritize these regardless of score.
EPSS · Nth percentile — FIRST.org’s estimated chance a flaw is exploited within 30 days. We flag it only in the top 10% — a statistical signal it’s unusually likely to be targeted, separate from whether attacks are confirmed.
💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove
A buffer access vulnerability in the Linux kernel ksmbd module allows out-of-bounds operations due to improper validation of inherited ACE SID lengths during DACL processing.
The Linux kernel SMB client implementation contains an out-of-bounds read vulnerability when parsing symlink error responses due to insufficient length validation.
ScadaBR version 1.2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack, which allows unauthorized actors to execute actions on behalf of an authenticated user.