New that day
- highpatchedexploited Microsoft Office PowerPoint Code Injection Vulnerability Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption. Added to CISA KEV on 2026-01-07 (federal deadline 2026-01-28).
- highpatchedexploited Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution. Added to CISA KEV on 2026-01-07 (federal deadline 2026-01-28).