CTI status
As of:
Last pipeline run:
Source reliability
Information credibility
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
The Miasma worm campaign demonstrates active exploitation of Microsoft development infrastructure, suggesting targeted attacks on software suppliers that could directly affect manufacturing organisations dependent on Microsoft technologies.
Pwn2Own-winning vulnerability in Canon imageCLASS MF654Cdw enables unauthenticated remote code execution via BJNP protocol with critical network accessibility.
An integer overflow vulnerability in Canon printers discovered at Pwn2Own enables unauthenticated network-adjacent remote code execution with high severity (CVSS 8.8).
An unauthenticated stack-based buffer overflow in Canon printers enables direct remote code execution with high CVSS (8.8), requiring no user interaction.
Unauthenticated remote code execution on Canon MFP devices is possible; devices are typically network-accessible and could serve as a lateral-movement vector.
Heap-based buffer overflow in SOAP/XML parsing enables unauthenticated remote code execution on Canon imageCLASS printers from network-adjacent attacker positions , not Internet-wide exploitable.
Local privilege escalation in Windows Secure Kernel requires prior code-execution capability; relevant for internal threat models involving compromised local accounts.
A use-after-free vulnerability in the Windows NDIS driver allows local attackers to escalate privileges, but requires prior ability to execute low-privileged code on the target system.
A local privilege escalation flaw in FortiClient allows elevation with high CVSS score; attackers must first obtain low-privilege code execution.
An authentication-required RCE vulnerability in FortiWeb with a critical CVSS score requires patch prioritisation.
Local privilege escalation in Windows afd.sys driver via race condition; CVSS 7.8 requires pre-existing code execution context.
Local privilege escalation in win32kfull (CVSS 7.8) requires prior code execution on the target system but presents a critical escalation path for attackers who have already compromised the system.
A local privilege escalation vulnerability in Windows requires prior low-privileged code execution on the target system as a prerequisite for exploitation.
Local privilege escalation in Windows core component with CVSS 7.8 requires prior code execution with low privileges.
A local privilege escalation vulnerability in the Windows win32kfull component with CVSS 8.8 requires an attacker to first execute low-privileged code to escalate to higher privilege levels.
A one-click vulnerability in VS Code/GitHub.dev allows attackers to steal GitHub OAuth tokens that grant read and write access to private repositories.
The group UNC3753 exploits social engineering and physical access (posing as fake IT technicians) for direct data exfiltration via USB drives, a high-risk attack pattern against organizations with weak physical access controls.
Autonomous AI agents significantly accelerate zero-day discovery; this creates pressure on patch cycles and requires robust dependency-management processes.
The out-of-band patch prioritization underscores that Microsoft considers the vulnerability time-critical; despite the absence of public exploits and in-the-wild exploitation, rapid deployment is recommended given SharePoint's history as a high-value target.