New that day
- highpatchedexploited Microsoft Windows Buffer Overflow Vulnerability Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).
- highpatchedexploited Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).
- highpatchedexploited Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).
- highpatchedexploited Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Can be chained with CVE-2010-0806. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).
- highpatchedexploited Microsoft Defender Link Following Vulnerability Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally. Can be chained with CVE-2026-45498. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).