Critical Alert 1 Active Exploit Detected Today

CVE-2026-104935 — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability →

Powered by CVE Watchtower

×

V8

Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched

Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai

Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched

Do Son June 18, 2025

Google has rolled out an important security update for the Stable Channel of Chrome, bringing the version...

Chrome Update Alert: Two High-Severity Flaws Patched – Update Now to Stay Safe! Chrome Security

Chrome Security

Chrome Update Alert: Two High-Severity Flaws Patched – Update Now to Stay Safe!

Do Son June 11, 2025

Google has released a Stable Channel update for Chrome Desktop, rolling out version 137.0.7151.103/.104 for Windows and...

Chrome 137 Released: Fixes High-Severity Use-After-Free & V8 Bugs Chrome 137 Chrome security update

Chrome 137 Chrome security update

Chrome 137 Released: Fixes High-Severity Use-After-Free & V8 Bugs

Do Son May 28, 2025

Google has officially promoted Chrome 137 to the stable channel, delivering security patches and feature improvements across...

Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)

CVE-2025-1914

Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)

Do Son March 4, 2025

The Google Chrome team has officially pushed Chrome 134 to the stable channel for Windows (134.0.6998.35/36), Mac...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
Watchtower Verified📅 Updated: Oct 14, 2026
CVE-2026-92707CVSS 5.3
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Protocols.MessagePack; MessagePack; MessagePack.Annotations;...
Watchtower Verified📅 Updated: Oct 13, 2026
CVE-2026-104935CVSS 8.6
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands....
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-96951CVSS 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker...
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026

CVE-2021-35942CVSS 9.1
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory...
📅 Updated: Oct 14, 2026
CVE-2021-33574CVSS 9.8
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It...
📅 Updated: Oct 14, 2026
CVE-2021-32292CVSS 9.8
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in...
📅 Updated: Oct 14, 2026
CVE-2021-22945CVSS 9.1
When sending data to an MQTT server, libcurl
📅 Updated: Oct 14, 2026
CVE-2021-3520CVSS 9.8
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4...
📅 Updated: Oct 14, 2026
CVE-2021-3177CVSS 9.8
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code...
📅 Updated: Oct 14, 2026
CVE-2020-35527CVSS 9.8
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have...
📅 Updated: Oct 14, 2026
CVE-2020-15801CVSS 9.8
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from...
📅 Updated: Oct 14, 2026