NEW A2
100 CVE-2026-58596
Network-based privilege escalation in Microsoft Edge allows attackers to gain system privileges remotely without user interaction.
Critical
CVSS
8.3
EPSS
0%
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status Elevated
All threats
Sorted by KEV · Risk · EPSSAdmiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
NEW ToddyCat B3
75 ToddyCat: your hidden email assistant. Part 2
ToddyCat develops specialized tools (Umbrij) to bypass EPP/EDR solutions through OAuth token theft via remote debugging port , an advanced technique for silent email compromise.
Critical
C3
37 SimpleHelp: Remote Maintenance Software Vulnerability Exploited in the Wild
CISA has added the SimpleHelp vulnerability to its Known Exploited Vulnerabilities catalog; security researchers have identified malware such as TaskWeaver and Djinn Stealer deployed post-compromise via CVE-2026-48558.
Critical