Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the expmt.exe (Siman) component, which fails to validate user-supplied data when parsing model/experiment files. A local attacker who convinces an engineer to open a malicious Arena file can run code in the context of the current user. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV; it was self-reported by Rockwell's PSIRT (advisory SD1784).
Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the model.exe (Siman) component when a victim opens a maliciously crafted simulation model file. The flaw lets an attacker run code in the context of the current user by tricking an operator or engineer into opening a booby-trapped file, making it a client-side, file-delivery RCE rather than a remotely reachable network service bug. No public exploit has been identified at time of analysis, and no EPSS or CISA KEV data was provided, so real-world exploitation appears limited to social-engineering-driven targeting.
Code execution in NVIDIA TensorRT (all versions through v10.16.1) arises from unsafe deserialization of untrusted data (CWE-502), letting an attacker who supplies a malicious serialized artifact run arbitrary code in the context of the inference process. It affects the TensorRT SDK/runtime used to optimize and execute deep-learning models. The vendor-assigned CVSS is 9.8, but there is no public exploit identified at time of analysis, EPSS is low (0.48%, 38th percentile), and CISA SSVC lists exploitation as 'none'.
The reschedule endpoint in Easy!Appointments 1.5.2 and earlier exposes the complete customer database record to any party holding the 12-character appointment hash, with no authentication check and no field whitelisting on the ea_users row. These hashes are deliberately distributed to customers in reschedule emails, embedded in confirmation page URLs, and visible in operator calendar links, which means the effective attacker pool is anyone who has ever received or forwarded a booking email. The fix is available in version 1.6.0 per the GitHub security advisory; no public exploit code and no CISA KEV listing have been identified at time of analysis.
HTTP/1.1 trailer leakage in Eclipse Jetty allows a remote unauthenticated attacker to read trailer headers from a previous request when sharing a persistent connection with another party. Trailers sent in an initial request are incorrectly retained in the server's connection state, causing them to bleed into all subsequent requests on the same keep-alive connection - either appended wholesale (if the later request has no trailers) or merged with the later request's own trailers. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Account takeover in Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 stems from the bundled password plugin trusting a username injected into session data, allowing an attacker to spoof another account's identity when changing a password. The password plugin fails to bind the change operation to the authenticated user, so a spoofed username can redirect a password change to a victim's account. A vendor patch is available; SSVC rates technical impact as total but reports no observed exploitation, and EPSS is low at 0.24%, with no public exploit identified at time of analysis.
Hidden ticket purchase bypass in Hi.Events through v1.10.0-beta allows unauthenticated remote attackers to acquire VIP, invite-only, or discounted tickets withheld from public sale by referencing hidden ticket and price IDs directly in order creation API requests. The server fails to enforce ticket visibility rules at the API layer, relying only on UI-level concealment, and sequential integer ticket IDs allow systematic enumeration from observed visible IDs. No public exploit or active exploitation (KEV) has been identified at time of analysis, but the unauthenticated network vector and low complexity make opportunistic exploitation straightforward following disclosure.
Improper TLS certificate validation in Fortinet FortiClientEMS (Endpoint Management Server) exposes sensitive information to network-positioned attackers across FortiClientEMS 7.2 (all listed builds up to 7.2.14), 7.4.0–7.4.1, and 7.4.3–7.4.5. Because the client fails to properly verify server certificates (CWE-295), an attacker able to intercept EMS communications can decrypt or observe protected traffic to disclose information. There is no public exploit identified at time of analysis and CISA SSVC scores exploitation as 'none', but Fortinet rates the flaw CVSS 9.8, so patching should be prioritized despite the lack of observed exploitation.
Heap-based buffer overflow in the Windows Resilient File System (ReFS) driver enables an unauthorized attacker with physical access to the target machine to execute arbitrary code, achieving full compromise of confidentiality, integrity, and availability. The vulnerability spans a wide range of Windows 10, Windows 11, and Windows Server releases from 2016 through 2025. No public exploit or active exploitation has been identified (SSVC: Exploitation none), and Microsoft has released patches; however, the physical attack vector (AV:P) is the dominant risk-shaping factor.
Remote code execution in the Windows DNS Server component allows an authorized, high-privileged attacker on an adjacent network to traverse outside intended directory boundaries and execute arbitrary code on the target host. Affected platforms span Windows Server 2012 through Server 2025 and Windows 10 versions 1607 and 1809. No public exploit code exists and no active exploitation has been confirmed - CISA SSVC classifies exploitation as 'none' and EPSS sits at 0.37% (29th percentile) - however SSVC rates technical impact as 'total', consistent with the full C:H/I:H/A:H CVSS triad.
Privilege escalation to SYSTEM level is achievable in Windows Spaceport.sys - the kernel-mode Storage Spaces port driver - across a wide range of Windows 10, Windows 11, and Windows Server releases, when an attacker has physical access to the target machine. An integer overflow or wraparound in the driver's arithmetic logic (CWE-190) can corrupt kernel memory structures, enabling full compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and SSVC confirms exploitation status as none, but the Technical Impact rating is total, meaning successful exploitation fully compromises the affected system.
Integer overflow in Windows Storage Spaces Direct enables an unauthenticated attacker with physical access to execute arbitrary code on affected Windows client and server platforms. The CVSS vector (AV:P/AC:L/PR:N/UI:N, C:H/I:H/A:H) confirms that no credentials are required but direct physical presence at the target hardware is mandatory, substantially narrowing the realistic attacker pool. No public exploit identified at time of analysis; SSVC rates exploitation as 'none' and EPSS stands at 0.33% (26th percentile), consistent with a physical-vector vulnerability not currently observed in opportunistic campaigns.
Heap-based buffer overflow in the Windows Kernel (CWE-122) enables an unauthenticated attacker with physical access to escalate privileges to SYSTEM level across a broad range of Windows 10, Windows 11, and Windows Server editions. The physical attack vector (AV:P) constrains the threat surface significantly, and SSVC rates exploitation as none with no public exploit identified at time of analysis. Despite total technical impact potential confirmed by both CVSS C:H/I:H/A:H metrics and SSVC technical impact rating, real-world risk is concentrated in physically accessible deployment scenarios such as kiosks, field laptops, or shared terminals.
Privilege escalation via heap-based buffer overflow in the Windows NTFS filesystem driver affects a broad range of Windows 10, Windows 11, and Windows Server versions, requiring only physical access to the target device - no OS credentials needed. An attacker with hands-on access to the hardware can trigger a heap overflow in NTFS processing to gain elevated privileges, potentially achieving full system compromise (High C/I/A). No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog, but the combination of zero authentication requirements and critical-level impact makes it a realistic threat for physically accessible endpoints. A vendor-supplied patch is available via the Microsoft Security Response Center.
Privilege escalation to full system control is achievable in Windows Storage Spaces Direct via a CWE-190 integer overflow that causes arithmetic wraparound, exploitable by an attacker with physical access to affected hardware. The flaw spans Windows 10 (versions 1607-22H2), Windows 11 (24H2-26H1), and Windows Server 2016 through 2025, representing a broad Microsoft platform footprint. Despite the C:H/I:H/A:H impact profile confirmed by SSVC as 'technical impact: total,' the physical access prerequisite (AV:P) is a hard constraint; SSVC additionally confirms exploitation status as none, no public exploit code exists, and EPSS sits at 0.31% (23rd percentile), making this a low operational priority for most organizations.
Privilege escalation via physical attack in the Windows Cloud Files Mini Filter Driver (cldflt.sys) affects all major Windows 10, Windows 11, and Windows Server releases through 2025. The use-after-free memory corruption flaw (CWE-416) in the kernel-mode driver allows an attacker with physical access to the device to escalate privileges to SYSTEM level, achieving full confidentiality, integrity, and availability compromise. No public exploit code has been identified and CISA has not listed this in KEV, but the SSVC assessment notes total technical impact - the physical access requirement is the primary limiting factor, not the vulnerability's severity once that barrier is cleared.
Path traversal in Adobe ColdFusion 2023 (up to Update 21) and ColdFusion 2025 (up to Update 10) enables a low-privileged attacker on an adjacent network to read arbitrary files outside the intended application directory, with scope change indicating access can extend beyond the ColdFusion process boundary to OS-level files. The CVSS vector (AV:A/PR:L/S:C/C:H) reflects that while high confidentiality impact is possible, exploitation is gated by both network adjacency and authenticated access, meaningfully constraining the realistic attacker pool. No public exploit identified at time of analysis; EPSS at 0.27% (19th percentile) and SSVC exploitation status of 'none' further indicate low current exploitation pressure.
Security feature bypass in Microsoft XML (MSXML) across Windows 10, Windows 11, and Windows Server 2012 through 2025 requires an attacker with physical access to the target device to exploit an untrusted search path condition. The vulnerability allows an unauthorized attacker to subvert the library or executable resolution order, enabling them to load attacker-controlled code that circumvents Windows security controls. No public exploit has been identified at time of analysis, and SSVC assessment confirms zero observed exploitation, though the technical impact if successfully executed is rated total (full compromise of confidentiality, integrity, and availability).
Security feature bypass in Adobe's Content Credentials (C2PA) SDKs - the Rust SDK (≤0.84.0), JavaScript SDK (≤0.7.0), and CLI tool (≤0.16.5) - allows unauthorized write access to content provenance data through improper input validation (CWE-20). No active exploitation is confirmed: SSVC rates exploitation as none, the vulnerability is absent from CISA KEV, and EPSS sits at 0.16% (6th percentile), signaling low real-world threat pressure at this time. Adobe has released patches across all three components under advisory APSB26-80.
Server-side request forgery in NVIDIA TensorRT-LLM for Linux exposes AI inference servers to internal network pivoting via the multimodal media fetching subsystem. Versions up to and including v1.3.0 rc16 are affected, allowing a network-accessible attacker to coerce the server into issuing arbitrary outbound HTTP requests to internal or external targets, leading to information disclosure and denial of service. No public exploit code exists and CISA has not listed this in the KEV catalog; EPSS probability sits at 0.11% (2nd percentile), indicating very low observed exploitation pressure at time of analysis.
Out-of-bounds read in Citrix Secure Access Client for Windows (all versions before 26.6.1.20) enables a local low-privileged attacker to read memory beyond an allocated buffer boundary, resulting in high confidentiality impact with no integrity or availability consequence. The CVSS 4.0 score of 6.8 reflects the local attack vector and low-privilege requirement, meaning an attacker must already hold a foothold on the endpoint. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Stack-based buffer overflow in Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSASE enables arbitrary code execution for a privileged authenticated attacker capable of bypassing ASLR and stack canary protections via crafted HTTP requests. The CVSS temporal metric E:P confirms proof-of-concept exploit code exists, and RL:O confirms an official patch has been released by Fortinet (advisory FG-IR-26-148). This vulnerability is not listed in CISA KEV at time of analysis, and the dual prerequisites of privileged access plus memory-protection bypass substantially constrain real-world exploitability despite the critical CIA impact triad.
Information disclosure in Microsoft Windows Schannel (the Secure Channel TLS/SSL provider) lets an authenticated, network-adjacent attacker read memory beyond an allocated buffer and leak sensitive data across a network connection. The flaw spans nearly the entire supported Windows family - Windows 10 (1607 through 22H2), Windows 11 (24H2/25H2/26H1), and Windows Server 2012 through 2025. Reported by Microsoft with a fix available; there is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Arbitrary file disclosure in Ivanti Xtraction before 2026.2.1 lets a remote, authenticated attacker traverse outside the application's web root and read sensitive files from the underlying host. The CVSS 3.1 score of 7.7 reflects a scope change (S:C), meaning the impact reaches beyond the web application into the host filesystem, though only confidentiality is affected. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; no EPSS score was provided.
Information disclosure via uninitialized resource use in Windows Remote Desktop Protocol (RDP) exposes sensitive memory contents to authenticated remote attackers across a wide range of Microsoft Windows desktop and server editions. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms this is exploitable over the network by any low-privileged authenticated user with no complexity or interaction requirements, yielding high confidentiality impact. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low barrier to exploitation and the ubiquitous deployment of Windows RDP make this a meaningful patching priority.
Windows Remote Desktop Protocol (RDP) exposes sensitive memory contents to network-adjacent attackers due to use of an uninitialized resource (CWE-908), resulting in high-confidentiality information disclosure. The flaw affects a broad swath of supported Windows client and server releases - from Windows 10 1607 through Windows 11 26H1 and Windows Server 2012 through Server 2025 - and requires victim user interaction (UI:R per CVSS) to trigger, limiting automated mass exploitation. No public exploit code or CISA KEV listing exists at time of analysis, and SSVC rates exploitation as 'none' with non-automatable technical impact, suggesting this is a real but not imminently weaponized risk.
Privilege escalation to SYSTEM level is achievable in the Windows USB Video Class (UVC) driver across a broad swath of Windows 10, 11, and Server editions via physical connection of a malicious USB device. The heap-based buffer overflow (CWE-122) is triggered when the driver processes attacker-controlled UVC descriptors from a crafted device, corrupting kernel heap memory. No active exploitation is confirmed (absent from CISA KEV, SSVC exploitation=none), and EPSS sits at 0.37% (29th percentile), consistent with the physical access barrier that makes mass exploitation impractical.
Null pointer dereference in the Windows SMB Server component allows an authenticated network attacker to crash the service across multiple Windows 10, 11, and Server editions. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms network exploitability with low-privilege credentials and complete availability impact, though confidentiality and integrity are unaffected. No public exploit identified at time of analysis; SSVC exploitation status is 'none' and EPSS sits at 0.79%, indicating low active exploitation pressure despite the broad product footprint.
LSASS denial-of-service in Microsoft Windows enables authenticated network attackers to exhaust resources in the Local Security Authority Subsystem Service, crashing it and forcing a system reboot across a wide range of Windows 10, 11, and Server releases spanning Windows Server 2012 through Server 2025. Microsoft has released patched builds via its standard update cycle; no public exploit code exists and CISA has not listed this in KEV. Despite the broad product footprint, EPSS of 0.79% and SSVC exploitation status of 'none' indicate low current threat activity, though domain controllers represent elevated-risk targets due to LSASS's role as the authentication hub.
Null pointer dereference in Active Directory Domain Services (AD DS) on Windows allows an authenticated, network-adjacent attacker to crash the service and deny domain authentication to all dependent users and systems. Affecting Windows 10 versions 1607 through 22H2, Windows 11 versions 24H2 through 26H1, and Windows Server 2012 through 2025, this vulnerability carries a CVSS 6.5 with high availability impact. No public exploit identified at time of analysis and CISA SSVC assesses exploitation as none with non-automatable attack path, keeping real-world urgency at moderate despite the breadth of affected platforms.
Null pointer dereference in Windows Active Directory Domain Services (AD DS) enables a low-privileged authenticated attacker to crash the service remotely, causing denial of service across the affected domain. The flaw spans a wide range of Windows client and server releases, from Windows 10 version 1607 through Windows 11 version 26H1 and Windows Server 2012 through 2025. No public exploit code has been identified and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog at time of analysis, though the network-accessible attack surface and low privilege requirement lower the bar for abuse in environments with broad domain user access.
Windows Event Logging Service across a wide range of Windows 10, Windows 11, and Windows Server versions fails to enforce its intended protection mechanisms, permitting any authenticated low-privileged network user to read information that should be access-controlled. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms exploitation requires only a valid low-privilege account and network connectivity, with no user interaction and no elevated rights - making it a practical post-compromise lateral-movement or reconnaissance tool. No public exploit code has been identified and this CVE is not listed in CISA KEV at time of analysis, but the ubiquitous deployment footprint across the Windows ecosystem elevates organizational exposure.
Out-of-bounds read in the Windows Remote Desktop Protocol (RDP) stack enables unauthenticated network attackers to disclose high-confidentiality memory contents from affected Windows systems, contingent on user interaction during an RDP session. The flaw (CWE-125) spans Windows 10 builds 1607 through 22H2, Windows 11 24H2 through 26H1, and Windows Server 2012 through 2025. No active exploitation is confirmed by CISA KEV, SSVC rates it non-automatable with partial technical impact, and EPSS sits at 0.67% (48th percentile), indicating moderate-to-low near-term exploitation probability despite the high confidentiality impact in the CVSS score.
Windows Remote Desktop Protocol (RDP) client leaks sensitive memory contents due to use of an uninitialized resource (CWE-908), allowing a network-accessible attacker to disclose potentially high-value information from a victim's system. Exploitation requires user interaction - a victim must connect to an attacker-controlled RDP endpoint - making this a client-side information disclosure attack affecting Windows 10 (all supported versions from 1607 through 22H2), Windows 11 (24H2 through 26H1), and Windows Server 2012 through 2025. No public exploit code has been identified and no active exploitation is confirmed; however, the CVSS confidentiality impact is rated High, meaning exposed memory could include credentials or session tokens.
Out-of-bounds read in Microsoft Excel's file parser discloses sensitive memory contents when a victim opens a specially crafted workbook, affecting Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, Office 365 for Mac, Office LTSC for Mac 2021/2024, and Office Online Server. The CVSS vector (AV:N/PR:N/UI:R/C:H) indicates unauthenticated network delivery with mandatory user interaction and high confidentiality impact. No public exploit identified at time of analysis; SSVC confirms no known active exploitation and EPSS at 0.64% (46th percentile) reflects below-average exploitation probability, positioning this as a targeted phishing risk rather than an opportunistic threat.
Use-after-free in the Windows Virtual Filtering Platform (VFP) enables authenticated network attackers to crash affected Windows endpoints and servers, resulting in a denial-of-service condition. The vulnerability spans a broad range of supported Windows 10, Windows 11, and Windows Server releases through 2025, making patch prioritization important despite the medium CVSS score. No public exploit code or active exploitation has been identified at time of analysis, and SSVC classifies this as not automatable with partial technical impact.
Windows Remote Desktop Protocol (RDP) across a broad range of Windows 10, 11, and Server editions discloses potentially sensitive memory contents over the network due to an uninitialized resource flaw (CWE-908), exploitable by remote unauthenticated attackers when a user interacts with an RDP session. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) indicates network-wide reachability with no attacker privilege requirement, though mandatory user interaction (UI:R) prevents automated mass exploitation. No public exploit has been identified at time of analysis; EPSS at 0.51% (40th percentile) and SSVC exploitation status of 'none' confirm low current threat activity despite Windows RDP's ubiquitous enterprise attack surface.
Out-of-bounds read (CWE-125) in Microsoft Office's file parsing logic exposes potentially sensitive in-memory data to a local attacker when a victim opens a specially crafted document, affecting Windows and macOS Office editions as well as Microsoft SharePoint Server. The CVSS 5.5 Medium score reflects a local-only attack vector with mandatory user interaction, confining impact to information disclosure with no integrity or availability consequence. No public exploit code exists, CISA SSVC classifies exploitation as 'none' with no automation potential, and the EPSS of 0.51% (40th percentile) confirms low current exploitation probability.
Path traversal in Microsoft Visual Studio Code (all versions from 1.0.0 up to 1.128.1) enables a locally-authenticated low-privilege attacker to bypass a file-system security boundary and read files outside a restricted directory, resulting in high confidentiality impact. The vulnerability is rated CVSS 5.5 Medium and is limited to local attack vectors, requiring PR:L authenticated access. No public exploit code or active exploitation has been identified at time of analysis; EPSS stands at 0.45% and SSVC designates exploitation status as none, making this a lower-priority remediation item despite the High confidentiality impact rating.
Local information disclosure in Microsoft Office and SharePoint via an integer overflow (CWE-190) exposes sensitive data to low-privileged local attackers across a broad range of Office versions on both Windows and Mac platforms. The CVSS vector (AV:L/PR:L) confirms exploitation requires an existing foothold on the target machine, limiting real-world impact to post-compromise scenarios or insider threats. No active exploitation is confirmed by CISA KEV, and the EPSS score of 0.40% (32nd percentile) combined with SSVC exploitation status of 'none' indicates this is not currently being weaponized in the wild.
Out-of-bounds read in libsoup's multipart processing exposes applications on Red Hat Enterprise Linux 6 through 10 to remote denial-of-service or partial memory disclosure. The flaw resides in soup_multipart_input_stream_read_headers() where oversized or malformed multipart boundary strings are not adequately size-validated, allowing an attacker to cause the stream reader to exceed its allocated buffer. A proof-of-concept exists per SSVC data, the attack is rated automatable, and no active exploitation is confirmed in CISA KEV - placing this in a monitored-but-actionable risk tier rather than an emergency response category.
Windows Audio Service on multiple Windows desktop and server versions improperly exposes sensitive information to locally authenticated standard users, enabling information disclosure without requiring elevated privileges. Affecting Windows 10 1809 through Windows 11 26H1 and Windows Server 2019 (with Server 2022 and 2025 referenced in tags), the flaw is exploitable post-foothold by any low-privileged local account, making it a realistic post-exploitation pivot rather than an initial access vector. No public exploit code has been identified at time of analysis, and a vendor-released patch is confirmed available via the Microsoft Security Response Center.
Uninitialized memory use in Chrome's Skia graphics library exposes potentially sensitive process memory to remote attackers in all Chrome versions prior to 150.0.7871.125. An unauthenticated remote attacker can trigger the leak by inducing a user to visit a crafted HTML page, causing the Skia renderer to read and disclose uninitialized memory contents. No public exploit has been identified at time of analysis, and SSVC classifies exploitation status as none, though the CVSS Confidentiality impact is rated High given the potential for in-memory secrets exposure.
Uninitialized variable use in Google Chrome's V8 JavaScript engine (all versions prior to 150.0.7871.125) exposes potentially sensitive process memory contents to remote attackers who can induce a user to visit a crafted HTML page. The confidentiality impact is rated high under CVSS, as uninitialized heap or stack memory in V8 may contain residual data such as session tokens or cached credentials from the browser process. No public exploit code exists and no active exploitation has been identified - EPSS sits at 0.33% (25th percentile) and SSVC rates exploitation as none - but a vendor patch is confirmed available in Chrome 150.0.7871.125.
Symlink entries in malicious tar archives bypass the `filter_safe_tarinfos` validation in Keras 3.12.0, enabling directory escape that can read or overwrite arbitrary files on the host filesystem. The root defect is in `keras/src/utils/file_utils.py`, where `is_path_in_dir` path containment checks are applied only to regular file entries - symlink entries are extracted without equivalent validation. The exposure is most severe on Python 3.10 and 3.11, where `filter_safe_tarinfos` is the sole extraction safeguard; no public exploit or active exploitation has been identified at time of analysis.
Unbounded goroutine accumulation in Hoverfly v1.12.7 and earlier allows remote denial of service via its remote post-serve action feature. The unauthenticated admin API permits any network-reachable attacker to register a post-serve action pointing at a black-hole TCP endpoint, load a catch-all simulation, then flood the proxy port - each matching request spawns a goroutine that blocks indefinitely in `http.DefaultClient.Do()`, consuming approximately 66 KB each until the process is OOM-killed. A detailed proof-of-concept with verified memory measurements is publicly available in GitHub Security Advisory GHSA-42j2-w334-qxw7; no CISA KEV listing has been recorded at time of analysis.
Roundcube Webmail's TNEF (winmail.dat) decoder enters an infinite loop when processing a specially crafted TNEF attachment, causing denial of service for users on affected installations. Versions before 1.6.17 and 1.7.x before 1.7.2 are confirmed affected per the vendor advisory issued 2026-07-05. No public exploit code and no active exploitation (CISA KEV) have been identified; the CVSS vector confirms user interaction is required, limiting automatable mass exploitation.
Authentication bypass in NVIDIA Triton Inference Server for Linux (all versions through 26.04) allows unauthenticated remote attackers to reach protected endpoints via an alternate path or channel, with potential downstream impacts including code execution, privilege escalation, information disclosure, and data tampering. No public exploit code has been identified and SSVC classifies exploitation as none at time of analysis, but the vulnerability is marked automatable with a network-accessible attack vector, making it a credible risk in internet-exposed ML inference deployments. The EPSS score of 0.26% (17th percentile) reflects low current exploitation probability, contrasting with the severity of stated impacts and warranting attention in AI/MLOps infrastructure.
Navigation input validation bypass in Google Chrome prior to 150.0.7871.125 enables a remote attacker who has already compromised the renderer process to circumvent navigation restrictions through a crafted HTML page. The flaw is classified as a second-stage, chained exploit - the attacker must first achieve renderer process compromise before this vulnerability becomes exploitable. With integrity rated High (I:H) and no confidentiality or availability impact, the practical danger is unauthorized navigation control, potentially enabling redirect-based phishing, cross-origin frame manipulation, or security boundary bypass. No public exploit code or active exploitation has been identified at time of analysis; EPSS probability stands at 0.26% (17th percentile), consistent with low current threat activity.
Same Origin Policy bypass in Google Chrome's V8 JavaScript engine (prior to 150.0.7871.125) allows a remote attacker to cross origin security boundaries via a crafted HTML page, enabling high-impact integrity violations against cross-origin content. Exploitation requires the victim to visit the malicious page (UI:R), limiting automated mass exploitation - a constraint confirmed by SSVC's Automatable:no finding. No public exploit code has been identified and this vulnerability does not appear in the CISA KEV catalog; EPSS at 0.26% (17th percentile) is consistent with no observed active exploitation at time of analysis.