New that day
- criticalpatchedexploited Microsoft Windows Link Following Vulnerability Microsoft Windows contains a link following vulnerability that allows for privilege escalation Can be chained with CVE-2023-36424. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).
- criticalpatchedexploited Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).
- highpatchedexploited Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft Visual Basic for Applications (VBA) Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).
- highpatchedexploited Adobe Acrobat Use-After-Free Vulnerability Adobe Acrobat contains a use-after-free vulnerability that allows for code execution Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).
- highpatchedexploited Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-16).
- highpatchedexploited Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).