New that day
- highpatchedexploited Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft Windows Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. Can be chained with CVE-2026-21525, CVE-2026-21510, CVE-2026-21533, CVE-2026-21519. Added to CISA KEV on 2026-02-10 (federal deadline 2026-03-03).
- highpatchedexploited Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-02-10 (federal deadline 2026-03-03).