CVE-2026-16362 — Use: Use-after-free in the WebRTC: Audio/Video component.
Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. CVSSv3.1 8.8 (HIGH)
8.8
CVSS v3.1
94
Edit Score
Latest intel// live feed
25 results//sorted by published//last sync 2026-09-29 00:28Z
CVE-2026-16361 — Memory: Some of these bugs showed evidence of memory corruption and we presume that with
Memory safety bugs present in Firefox ESR 115.37 and Firefox ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38 and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16360 — Memory: Some of these bugs showed evidence of memory corruption and we presume that with
Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16359 — Incorrect: boundary conditions in the Audio/Video: GMP component.
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.1 (CRITICAL)
9.1
CVSS v3.1
96
Edit Score
CVE-2026-16358 — Site: isolation issue in the Graphics: WebRender component.
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16357 — Incorrect: boundary conditions in the Graphics component.
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16356 — Sandbox: escape due to use-after-free in the Disability Access APIs component.
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16355 — JIT: miscompilation in the JavaScript Engine: JIT component.
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16353 — Invalid: pointer in the DOM: Bindings (WebIDL) component.
Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16352 — Sandbox: escape due to use-after-free in the Disability Access APIs component.
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16351 — Sandbox: escape due to use-after-free in the DOM: Navigation component.
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16350 — Incorrect: boundary conditions in the Audio/Video: cubeb component.
Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-16349 — Same: Same-origin policy bypass in the DOM: Navigation component.
Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
A new extortion cocktail: office printers, small ransoms, and BitLocker
Kaspersky Securelist·securelist.comin the wild
Kaspersky researchers documented two BitLocker-based extortion campaigns in Latin America (Colombia, Mexico) where threat actors leveraged misconfigured RDP and MSSQL services to gain initial access, then used built-in Windows BitLocker encryption and RMM tools (ManageEngine Endpoint Central, Mesh Agent, Tactical RMM) to encrypt critical infrastructure and demand ransoms via printed ransom notes. The 'XEntry Team' campaign involved three-month dwell time, lateral movement through MSSQL xp_cmdshell abuse, and GPO-based encryption deployment across domain-joined systems.
76
Edit Score
CVE-2026-65008 — Grav: 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php)
Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php), which passes a Class::method callable string and its arguments directly to call_user_func_array() without any allowlist. Because the form plugin routes page frontmatter through this path, an authenticated account with the admin.pages (or api.pages.write) permission can plant a malicious callable directive in a page. The command th CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-65007 — Grav: This allows any user with admin.login to mint a persistent API key bound to
The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks before the account-management ACL runs and authorizes the caller on only the admin.login permission (the baseline permission held by every panel user). This allows any user with admin.login to mint a persistent API key bound to any account, and the forged key inherits the target account's API permis CVSSv3.1 9.6 (CRITICAL)
9.6
CVSS v3.1
98
Edit Score
CVE-2026-1617 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-64606 — Deserialization: of untrusted data vulnerability that may allow class-registration checks to be bypassed during
Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the issue. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-64609 — Out: Out-of-bounds read via sun.misc.Unsafe in Apache Fory.
Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is used, readAlignedVarUint() can read beyond the bounds of the underlying buffer. Out-of-band zero-copy deserialization is an opt-in feature; applications that do not use it are not affected. This issue affects Apache Fory (formerly Apache Fury): from 0.5.0 before 1.4.0. Versions before 0.11.0 were published under the Maven coordinates org.apache.fury:fury-core. Users are reco CVSSv3.1 9.1 (CRITICAL)
9.1
CVSS v3.1
96
Edit Score
CVE-2026-64608 — Heap: type confusion and out-of-bounds read/write in the Apache Fory C++ implementation.
Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and out-of-bounds memory access. Only the C++ implementation is affected; other language implementations of Apache Fory are not. This issue affects Apache Fory C++: from 0.14.0 before 1.4. CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
CVE-2026-62415 — Joomla: The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users
The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets. CVSSv3.1 9.1 (CRITICAL)
9.1
CVSS v3.1
96
Edit Score
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery
Kaspersky Securelist·securelist.comin the wild
Kaspersky researchers disclosed a sophisticated .NET Native AOT communication module (AzureCommunication.dll) used by Project CAV3RN, a cyberespionage framework targeting Israeli entities. The module abuses Microsoft Outlook calendar events accessed via Microsoft Graph as a dead-drop C2 channel, with DNS AAAA records serving as a fallback configuration recovery mechanism when Graph authentication fails. The framework uses RSA-OAEP and AES-256-GCM encryption for command delivery and result exfiltration, scheduling all events in a fixed 2050 calendar window to avoid detection.
82
Edit Score
CVE-2026-11767 — Free: The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact
The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions. CVSSv3.1 8.8 (HIGH)
8.8
CVSS v3.1
94
Edit Score
CVE-2026-13439 — Easy: The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token stored in wp_emsfb_temp_links, combined with a publicly-accessible nonce refresh endpoint (Emsfb/v1/nonce/refresh) that issues valid WordPress REST nonces to unauthenticated visitors. Th CVSSv3.1 9.8 (CRITICAL)
9.8
CVSS v3.1
99
Edit Score
Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
Trend Micro Research·trendmicro.com
Trend Micro analysis of the 2026 vulnerability disclosure surge (projected 66,000 CVEs) argues that raw volume masks actual exploitable risk: critical CVEs have halved to ~7% of disclosures, and actively exploited vulnerabilities remain under 1%. The real threat is speed—disclosure-to-exploitation windows have collapsed from weeks to hours—requiring risk-based triage (KEV-first, EPSS-driven) and virtual patching rather than patch-count metrics.
72
Edit Score