New that day
- highpatchedexploited Gladinet Triofox Improper Access Control Vulnerability Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. Added to CISA KEV on 2025-11-12 (federal deadline 2025-12-03).
- highpatchedexploited Microsoft Windows Race Condition Vulnerability Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access. Added to CISA KEV on 2025-11-12 (federal deadline 2025-12-03).
- highpatchedexploited WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code. Added to CISA KEV on 2025-11-12 (federal deadline 2025-12-03).