Several products
No Several products CVE is in the CISA KEV catalogue.
Tracked since 24 Mar · latest article Mon 21 Sep · RSS
Exploited, by due date
CSV downloadNo Several products CVE is in the CISA KEV catalogue.
5 articles from 5 outlets since 24 Mar; the latest 35 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 21 Sep · 09:13 UTC | Security Affairs | AI Agents Expose New Attack Paths Through Skills and Memory |
| Mon 6 Jul · 17:42 UTC | SecurityOnline | Cursor IDE flaws let hackers break sandbox, risk remote code |
| Fri 3 Jul · 08:11 UTC | SecurityWeek | Critical Cursor flaws allow remote code execution via path tricks |
| Thu 30 Apr · 07:41 UTC | The Hacker News | Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution |
| Tue 24 Mar · 21:58 UTC | Dark Reading | How AI Coding Tools Crushed the Endpoint Security Fortress |
Who reported 5 outlets, last 12 months
- Dark Reading1
- The Hacker News1
- SecurityWeek1
- SecurityOnline1
- Security Affairs1
- AI Agents Expose New Attack Paths Through Skills and MemorySecurity Affairs
- Cursor IDE flaws let hackers break sandbox, risk remote codeSecurityOnline
- Critical Cursor flaws allow remote code execution via path tricksSecurityWeek
- Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code ExecutionThe Hacker News
- How AI Coding Tools Crushed the Endpoint Security FortressDark Reading
All CVEs in coverage
6How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.