rce

Rockwell Automation’s FactoryTalk Optix has a newly publicized vulnerability that demands immediate attention from OT and IT teams: a lack of URI sanitization in the product’s embedded MQTT broker allows remote loading of Mosquitto plugins and can lead to remote code execution (RCE), affecting...

CISA’s latest update to the Known Exploited Vulnerabilities (KEV) Catalog adds three actively exploited flaws — a Linux kernel TOCTOU race condition, an Android Runtime issue, and a high‑impact Sitecore deserialization vulnerability — forcing organizations that track KEV and federal agencies...

CISA’s September 2, 2025 bulletin that released four new Industrial Control Systems (ICS) advisories is a stark reminder that operational technology (OT) and energy-sector devices remain high-value targets—and that defenders must move faster than vendors and attackers to close windows of...

CISA has added CVE-2025-57819 — an authentication‑bypass and SQL‑injection chain that can lead to remote code execution in Sangoma FreePBX — to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation and urging immediate remediation. Background FreePBX is a...

India’s national cybersecurity agency has issued a high‑severity warning about a broad set of vulnerabilities across Microsoft products — a multi‑component risk that demands immediate patching and tighter operational controls from both home users and enterprise IT teams. Background / Overview...

BeyondTrust’s release of the 2023 Microsoft Vulnerabilities Report — framed as the 10th‑anniversary edition — is both a retrospective and a warning: the last decade of Microsoft vulnerability disclosures has delivered recurring patterns that disproportionately affect Windows Server environments...

INVT’s VT‑Designer and HMITool — two engineering and HMI utilities widely used in industrial and building automation environments — are the subject of a coordinated vulnerability disclosure that assigns multiple high‑severity remote code execution (RCE) flaws to file‑parsing logic in both...

Microsoft’s Internet Information Services (IIS) and its relationship with Windows Server have resurfaced in recent reporting as a nexus of operational pain and security risk — a story that blends a high‑volume patch cycle, at least one serious authentication vulnerability, and persistent...

Cyble’s latest weekly scan shows a dizzying pace of disclosures and exploitation: researchers tracked 908 new vulnerabilities in the last seven days and report that more than 188 of those already have publicly available proofs‑of‑concept (PoCs), tightening the window defenders have to respond...

Microsoft’s Security Response Center has published an advisory for CVE-2025-55231 describing a race‑condition vulnerability in the Windows storage management stack that, according to the vendor entry, can be abused to achieve remote code execution — a high‑impact outcome that requires immediate...

India’s national cybersecurity agency has escalated an urgent warning about a wave of high‑severity Microsoft vulnerabilities that together pose significant risk to consumers, enterprises, and cloud customers — the advisory links Microsoft’s August security updates (including a publicly...

CISA has formally added CVE-2025-54948 — a critical OS command injection in Trend Micro Apex One’s on‑premises Management Console — to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation and triggering accelerated remediation expectations for federal...

Siemens’s RUGGEDCOM CROSSBOW Station Access Controller (SAC) has been identified as vulnerable to multiple memory‑corruption flaws in the embedded SQLite component that—if left unpatched—could allow remote attackers to crash devices or execute arbitrary code; Siemens recommends updating affected...

Microsoft’s August Patchday reads like a wake‑up call: a newly disclosed Kerberos-related weakness tied to the delegated Managed Service Account (dMSA) feature in Windows Server 2025 can — under the right conditions — let an attacker escalate to domain‑admin control, and a clutch of additional...

Microsoft's August security rollup is one of those months that makes system administrators stop what they're doing and triage: this Patch Tuesday delivered fixes for a broad sweep of vulnerabilities across Windows, Exchange, Azure and related services — including a publicly disclosed Kerberos...

Microsoft’s August Patch Tuesday is a heavyweight release: Redmond shipped fixes for more than a hundred security flaws, closed a clutch of high‑severity remote code execution and privilege‑escalation defects, and bundled new Windows 11 quality and AI‑adjacent features that will change how some...

Microsoft pushed its August Patch Tuesday cumulative updates on August 12–13, 2025, delivering the monthly security rollups that fix a broad range of vulnerabilities across Windows client and server platforms—most notably a publicly disclosed privilege‑escalation bug in Windows Kerberos...

Microsoft’s August Patch Tuesday delivered a heavy-duty security package this month — industry tallies vary between 107 and 111 vulnerabilities, including a publicly disclosed Kerberos elevation-of-privilege issue (CVE‑2025‑53779) and roughly a dozen other critical remote‑code‑execution (RCE)...

CVE-2025-53740 — Microsoft Office “use‑after‑free” (local code execution) An in‑depth feature for security teams, admins and threat hunters Summary (tl;dr) CVE-2025-53740 is reported by Microsoft as a use‑after‑free (CWE‑416) memory‑corruption flaw in Microsoft Office that can allow an attacker...

Microsoft’s own Security Update Guide lists a new vulnerability tracked as CVE-2025-53766, described as a heap-based buffer overflow in GDI+ that could allow remote code execution over a network, but independent public records and third‑party databases were not uniformly available at the time of...