CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
33 articles · 19 Mar – 14 Oct

Wed 14 Oct· 1 article

  1. CISA flags actively exploited Windows flaw with 16 October patch deadline

    CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…

    CISACVE-2026-96951CVE-2026-96951Exploited

Fri 25 Sep· 2 articles

  1. Microsoft SharePoint Enterprise Server 20162 articles this day · CISA first

    CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw · CISA Flags Actively Exploited SharePoint and MikroTik Flaws

    1 outletCVE-2026-65660CVE-2026-65660Exploited

Tue 8 Sep· 2 articles

  1. CISA Flags Actively Exploited Windows Flaw Enabling Privilege Escalation

    CISA has added CVE-2026-85880 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Microsoft Windows and is a heap-based buffer overflow in Windows Advanced Local Procedure Call that enables local privilege escalation. The flaw…

    CISACVE-2026-85880CVE-2026-85880Exploited

  2. CISA Warns Attackers Are Exploiting Windows Update Privilege Flaw

    CISA added CVE-2026-81963 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 September 2026. The vulnerability affects Microsoft Windows and is named the Microsoft Windows Link Following Vulnerability. It allows a local attacker to escalate…

    CISACVE-2026-81963CVE-2026-81963Exploited

Wed 26 Aug· 1 article

  1. CISA adds Microsoft SQL flaw to Known Exploited Vulnerabilities list

    CISA has added CVE‑2019‑1068 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft SQL Server and is named the Microsoft SQL Server Remote Code Execution Vulnerability. In brief, the vulnerability allows an attacker to execute…

    CISACVE-2019-1068CVE-2019-1068Exploited

Fri 21 Aug· 1 article

  1. CISA flags Entra ID flaw CVE‑2026‑69836 in KEV list

    On 21 August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑69836 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Entra ID (formerly Azure Active Directory) and is named the Microsoft Entra…

    CISACVE-2026-69836CVE-2026-69836Exploited

Tue 18 Aug· 2 articles

  1. CISA Urges Patching of Microsoft SharePoint Flaw CVE-2026-55040

    CISA has added CVE-2026-55040 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint. The entry covers the Microsoft SharePoint Weak Authentication Vulnerability, which allows an unauthenticated attacker to bypass a security feature…

    CISACVE-2026-55040CVE-2026-55040Exploited

  2. CISA Flags Microsoft IKE Flaw CVE-2026-33824 in KEV Catalog

    CISA has added CVE-2026-33824 to its Known Exploited Vulnerabilities catalogue. The entry concerns Microsoft’s Internet Key Exchange (IKE) Service Extensions and covers the Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability,…

    CISACVE-2026-33824CVE-2026-33824Exploited

Tue 11 Aug· 1 article

  1. CISA Flags High Risk Windows WinSock Use After Free Flaw in KEV

    CISA has added CVE-2026-68820 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft’s Windows Ancillary Function Driver for WinSock and is identified as the Microsoft Windows Ancillary Function Driver for WinSock Use‑After‑Free…

    CISACVE-2026-68820CVE-2026-68820Exploited

Wed 22 Jul· 1 article

  1. CISA Flags CVE-2026-50522 in KEV, Warns of SharePoint RCE Risk

    CISA has added CVE‑2026-50522 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint. The vulnerability is described as a deserialization of untrusted data flaw that could allow an unauthenticated attacker to execute code over a…

    CISACVE-2026-50522CVE-2026-50522Exploited

Thu 16 Jul· 1 article

  1. CISA Adds Critical SharePoint Flaw CVE-2026-58644 to KEV

    CISA has added CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft SharePoint and is named Microsoft SharePoint Deserialization of Untrusted Data Vulnerability. It allows an unauthenticated attacker to execute…

    CISACVE-2026-58644CVE-2026-58644Exploited

Tue 14 Jul· 2 articles

  1. CISA KEV Flags SharePoint Privilege Escalation Bug CVE-2026-56164

    CISA has added CVE‑2026-56164, named Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability, to its Known Exploited Vulnerabilities catalogue. The affected vendor is Microsoft and the product is SharePoint Server. The…

    CISACVE-2026-56164CVE-2026-56164Exploited

  2. CISA warns ADFS flaw allows local privilege escalation

    On 14 July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑56155 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft’s Active Directory Federation Services (ADFS) and is titled *Microsoft Active…

    CISACVE-2026-56155CVE-2026-56155Exploited

Wed 1 Jul· 1 article

  1. CISA Flags SharePoint CVE-2026-45659 in KEV Catalog

    CISA has added CVE‑2026‑45659 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint Server. The vulnerability, named Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability, allows an authorised attacker to…

    CISACVE-2026-45659CVE-2026-45659Exploited

Wed 20 May· 7 articles

  1. CISA adds CVE-2026-45498 to KEV, urges Defender patch by June

    CISA has added CVE‑2026-45498 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Defender and is identified as the Microsoft Defender Denial of Service Vulnerability, which allows an attacker to cause a denial‑of‑service…

    CISACVE-2026-45498CVE-2026-45498Exploited

  2. CISA warns of active exploit in Microsoft Defender CVE-2026-41091

    CISA has added CVE‑2026‑41091 to its Known Exploited Vulnerabilities (KEV) catalogue. The affected vendor is Microsoft and the product is Defender. The vulnerability, named Microsoft Defender Link Following Vulnerability, allows an authorised attacker to…

    CISACVE-2026-41091CVE-2026-41091Exploited

  3. CISA's KEV Catalog Helps Firms Prioritise Active Exploit Patches

    CISA has added CVE-2010-0806 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft Internet Explorer and is identified as the Microsoft Internet Explorer Use-After-Free Vulnerability. It allows remote attackers to execute arbitrary…

    CISACVE-2010-0806CVE-2010-0806Exploited

  4. CISA Adds CVE-2010-0249 to KEV Catalog, Urging IE Users to Patch

    On 20 May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2010‑0249 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Internet Explorer and is identified as the Microsoft Internet Explorer…

    CISACVE-2010-0249CVE-2010-0249Exploited

  5. CISA logs CVE-2009-1537 DirectX flaw in KEV catalog

    CISA has added CVE‑2009‑1537 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft DirectX, specifically the QuickTime Movie Parser Filter in quartz.dll, and is named the Microsoft DirectX NULL Byte Overwrite Vulnerability. It…

    CISACVE-2009-1537CVE-2009-1537Exploited

  6. Microsoft Windows2 articles this day · CISA first

    CISA adds buffer overflow flaw CVE-2008-4250 to KEV catalogue · CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs

    1 outletCVE-2008-4250CVE-2008-4250Exploited

Fri 15 May· 2 articles

  1. Microsoft2 articles this day · CISA first

    CISA adds Exchange XSS flaw CVE‑2026‑42897 to KEV list · CISA Adds MS Exchange XSS Flaw CVE-2026-42897 to KEV Catalog

    1 outletCVE-2026-42897CVE-2026-42897Exploited

Tue 28 Apr· 1 article

  1. Microsoft Windows Shell flaw allows network spoofing; patch urged

    On 28 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑32202 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Windows and is named the Microsoft Windows Protection Mechanism Failure…

    CISACVE-2026-32202CVE-2026-32202Exploited

Wed 22 Apr· 1 article

  1. CISA adds Microsoft Defender flaw CVE-2026-33825 to KEV list

    On 22 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑33825 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Microsoft Defender and is officially named Microsoft Defender Insufficient…

    CISACVE-2026-33825CVE-2026-33825Exploited

Tue 14 Apr· 2 articles

  1. CISA Warns of Active Exploit in SharePoint Flaw CVE‑2026-32201

    CISA has added CVE‑2026-32201 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint Server. The vulnerability is an improper input validation flaw that enables an unauthenticated attacker to spoof responses over a network. The…

    CISACVE-2026-32201CVE-2026-32201Exploited

  2. CISA Adds CVE-2009-0238 Excel Flaw to KEV Catalog, Urges Patching

    On 14 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2009‑0238 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Office, specifically Excel, and is known as the Microsoft Office Remote Code…

    CISACVE-2009-0238CVE-2009-0238Exploited

Mon 13 Apr· 4 articles

  1. CISA Adds Windows Privilege Flaw CVE-2023-36424 to KEV Catalog

    CISA has added CVE‑2023-36424 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft Windows. The vulnerability, named Microsoft Windows Out-of-Bounds Read Vulnerability, resides in the Common Log File System Driver and could allow a threat…

    CISACVE-2023-36424CVE-2023-36424Exploited

  2. CISA adds Microsoft Exchange flaw CVE-2023-21529 to KEV list

    On 13 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2023‑21529 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Exchange Server and is named the Microsoft Exchange Server Deserialization…

    CISACVE-2023-21529CVE-2023-21529Exploited

  3. CISA flags Windows link flaw CVE-2025-60710 as actively exploited

    CISA has added CVE‑2025-60710, the Microsoft Windows Link Following Vulnerability, to its Known Exploited Vulnerabilities catalogue. The entry concerns Microsoft’s Windows operating system, which contains a link following flaw that permits privilege…

    CISACVE-2025-60710CVE-2025-60710Exploited

  4. CISA warns of exploited VBA flaw CVE-2012-1854, urges patch

    CISA has added CVE‑2012-1854 to its Known Exploited Vulnerabilities catalogue. The entry concerns Microsoft’s Visual Basic for Applications (VBA) and relates to the Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability, which could…

    CISACVE-2012-1854CVE-2012-1854Exploited

Thu 19 Mar· 1 article

  1. CISA Adds CVE-2026-20963 to Known Exploited Vulnerabilities Catalogue

    CISA has added CVE‑2026‑20963 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft SharePoint and is titled “Microsoft SharePoint Deserialization of Untrusted Data Vulnerability”. It enables an unauthorised attacker to execute…

    CISACVE-2026-20963CVE-2026-20963Exploited

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device