Category

Kev

40 articles · Page 3 of 4
All News Malware Ransomware Breaches Vulnerabilities Nation-State CVEs
CVE
CVE-2025-66376 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abu…
CISA KEV · Mar 18, 2026 · CRITICAL
CVE
CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute co…
CISA KEV · Mar 18, 2026 · CRITICAL
CVE
CVE-2025-47813 — Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in t…
CISA KEV · Mar 16, 2026 · CRITICAL
CVE
CVE-2026-3910 — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could al…
CISA KEV · Mar 13, 2026 · CRITICAL
CVE
CVE-2026-3909 — Google Skia Out-of-Bounds Write Vulnerability
Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory acces…
CISA KEV · Mar 13, 2026 · CRITICAL
CVE
CVE-2025-68613 — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system …
CISA KEV · Mar 11, 2026 · CRITICAL
CVE
CVE-2021-22054 — Omnissa Workspace ONE Server-Side Request Forgery
Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability t…
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to ru…
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2026-1603 — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow …
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2017-7921 — Hikvision Multiple Products Improper Authentication Vulnerability
Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privile…
CISA KEV · Mar 5, 2026 · CRITICAL
CVE
CVE-2021-22681 — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may al…
CISA KEV · Mar 5, 2026 · CRITICAL
CVE
CVE-2023-43000 — Apple Multiple products Use-After-Free Vulnerability
Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web …
CISA KEV · Mar 5, 2026 · CRITICAL