2021-09-06

CVE-2021-40531 Sep 06, 21:15 CRITICAL POC PATCH THREAT Act Now

Sketch before 75 allows library feeds to be used to bypass file quarantine. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-3766 Sep 06, 12:15 CRITICAL POC PATCH Act Now

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-40532 Sep 06, 21:15 CRITICAL PATCH Act Now

Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.