CVE-2025-6558: Weaponized WebGL Input Flaw Enables Chromium GPU Sandbox Escape and Remote Code Execution
Severity: High (CVSS 3.1 Base Score: 8.8)Exploit Status: Actively Exploited in the Wild (Confirmed Zero-Day)Affected Platforms: Windows,…
continue reading..
CVE-2025-59718: FortiCloud SSO Trust Failure Enables Unauthenticated Admin Access
Overview CVE-2025-59718 is a critical authentication bypass vulnerability affecting several Fortinet products that rely on FortiCloud Single…
continue reading..
CVE-2025-14611: Actively Exploited Hardcoded Encryption Key Flaw in Gladinet Platforms
Overview CVE-2025-14611 is a high-risk security vulnerability identified in the Gladinet CentreStack and Triofox file-sharing platforms. The…
continue reading..
Critical Adobe Security Alert: Multiple High-Impact Vulnerabilities Across ColdFusion, AEM, and Acrobat
ColdFusion, Experience Manager, Acrobat & Reader, DNG SDK, Creative Cloud Desktop Adobe’s December 2025 security release addresses…
continue reading..
CVE-2025-59516 & CVE-2025-59517: Windows Storage VSP Driver Privilege Escalation Vulnerabilities
Vulnerability Summary CVE-2025-59516 CVE-2025-59517 Both vulnerabilities were addressed as part of Microsoft’s December 2025 security updates. Overview…
continue reading..
CVE-2025-62557: Microsoft Office Use-After-Free Bug Enables Remote Code Execution
Vulnerability Summary Overview CVE-2025-62557 is a serious remote code execution vulnerability in Microsoft Office caused by a…
continue reading..
CVE-2025-62554: Microsoft Office Type Confusion Flaw Enables Remote Code Execution
Vulnerability Summary Overview CVE-2025-62554 is a serious remote code execution vulnerability affecting Microsoft Office. The flaw allows…
continue reading..
CVE-2025-48572: Android Framework Zero-Day Enables Privilege Escalation Attacks
Vulnerability Summary Overview CVE-2025-48572 is a serious security flaw in the core Android operating system that attackers…
continue reading..
CVE-2025-14265: ScreenConnect Extension Integrity Flaw Enables Server Compromise
Vulnerability Summary Overview ConnectWise has disclosed and fixed a critical security flaw in the ScreenConnect server that…
continue reading..
