History

18 Mar 2026

2 new, 0 updated.

New that day

  1. highpatchedexploited Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML. Added to CISA KEV on 2026-03-18 (federal deadline 2026-04-01). CVE-2025-663762 sources
  2. highpatchedexploited Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-03-18 (federal deadline 2026-03-21). CVE-2026-209632 sources