New that day
- criticalpatchedexploited Broadcom VMware vCenter Path Traversal Vulnerability Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).
- highpatchedexploited Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).
- highpatchedexploited Microsoft SharePoint Weak Authentication Vulnerability Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).
- highpatchedexploited Apple macOS Improper Authentication Vulnerability Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).