Monthly
Markdown Preview Enhanced, the VS Code Markdown preview extension, fails to validate webview-to-extension-host messages prior to version 0.8.30: the handler in src/preview-provider.ts accepts any attacker-supplied _crossnote.{command} plus arbitrary args and forwards it to vscode.commands.executeCommand with no allowlist or type checking. JavaScript already running inside the preview webview - obtainable via the separately tracked .crossnote/head.html script-injection flaw (GHSA-mcwg-4j78-qwv3) - can therefore invoke privileged extension commands such as updateMarkdown, chromeExport, pandocExport, and runCodeChunk with attacker-selected arguments, enabling file writes, code-chunk execution, export-tool execution, and arbitrary URL opening within the victim's workspace context. Exploitation is conditional rather than standalone: it requires a pre-existing webview JavaScript execution primitive and a victim who opens and previews attacker-controlled repository content, and no public exploit code has been identified at time of analysis; both the bridge-abuse bug and its most practical trigger are resolved in 0.8.30.
An insufficiently protected endpoint in Ivanti Neurons Patch for Intune exposes sensitive authentication information to a remote attacker who already holds a valid low-privilege account on the application, per the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, which limits the confirmed impact to confidentiality. Exploitation is low complexity and requires no user interaction, but it is gated by the need for an authenticated session and by network reachability to the management interface, so organizations that keep the console on a trusted admin network materially reduce exposure. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis, and the leaked credential material becomes dangerous mainly if it can be reused against the platform or federated services.
SAP NetWeaver Visual Composer fails to enforce sufficient authorization checks within certain portal functionality, allowing a low-privileged authenticated user to invoke internal operations against a preconfigured remote system; depending on how that remote connection is configured, the attacker could fully compromise the destination system, with high impact on confidentiality, integrity, and availability. The flaw carries a CVSS 3.1 score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting the scope change that carries impact from the vulnerable portal into the connected remote system. Exploitation requires a valid low-privileged portal session (not anonymous access) plus an existing preconfigured remote destination reachable through Visual Composer, and there is currently no public exploit identified at time of analysis.
Arbitrary local program execution is possible in EdgeEver Desktop 1.92.0 through 1.112.0 because the desktop:acp-probe IPC handler performs no sender validation and spawns whatever executable path is supplied in the caller's input.path, running it with the victim user's privileges. This is not a standalone network RCE: an attacker must first land stored cross-site scripting in a renderer through the template-preview or drag-preview feature, and the victim must then preview that attacker-controlled content so the renderer script can invoke probeAcpAdapter (CVSS v4.0 7.3; independent assessment CVSS v3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). No public exploit code and no CISA KEV listing were identified at time of analysis; an upstream fix commit has been referenced, but no patched release version has been independently confirmed.
Remote code execution in NetEase Cloud Music for Windows 3.1.38 and 3.1.39.205426 allows an attacker with an active adversary-in-the-middle position to forge the /pc/upgrade/get upgrade-check response using a publicly known AES key over an unvalidated TLS connection, inject renderer content, and invoke the os.navigateExternal IPC bridge with a file:// URL to execute arbitrary local binaries under the logged-in user. The vendor CVSS 4.0 score is 9.2, and the independent assessment retains high confidentiality, integrity, and availability impact with no privileges or user interaction required, though AC:H reflects the network-position prerequisite; no public exploit identified at time of analysis and no CISA KEV active exploitation is indicated.
JavaScript injection into the WebView of the Joyland AI app (all versions, tracked as CPE cpe:2.3:a:joyland:joyland.ai:*) lets an attacker who shares a network position with the victim and can intercept or tamper with content loaded into the app run arbitrary script inside the app's privileged context; no authentication is required and no user interaction is needed. In the default, unpermissioned install state the attacker can read the device clipboard, make arbitrary HTTP requests through the Weex 'stream' module, and reach app-internal storage, while on devices that previously granted camera, microphone, location, or storage permissions the same flaw escalates to full filesystem, camera, microphone, and GPS access. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no vendor-released patch has been identified; the CVSS 4.0 base score is 9.0 (Critical) and EPSS data was not provided for this record.
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/SQLWin.do endpoint, because the 'sql' request parameter is handed to the database tier without adequate validation or authorization checks (CWE-749, Exposed Dangerous Method or Function). Exploitation requires only a valid low-privileged session (CVSS vector PR:L) plus network reachability to the endpoint, and needs no user interaction; success yields high confidentiality, integrity, and availability impact limited to the Agentflow system itself (VC:H/VI:H/VA:H, SC:N/SI:N/SA:N, score 8.7), meaning database contents can be read, altered, or destroyed. There is no confirmed active exploitation (CISA KEV does not list this CVE) and no public exploit code identified at time of analysis, but the low complexity, low privilege requirement, and network-reachable attack surface make this a high-priority fix for organizations running Agentflow 4.0 builds that predate the 2026/08/28 remediation.
Local privilege escalation in Qualcomm Snapdragon firmware allows an attacker with low privileges to gain high-impact code execution and control over the device. The flaw resides in an exposed dangerous function within a gRPC server (CWE-749) and affects specific QPM (v3.0.127.2, v3.0.126.7, v3.0.125.4) and QSC (v1.21.0, v1.19.1, v1.17.1) builds. Exploitation requires local access and a pre-existing low-privileged foothold; no public exploit or active exploitation has been identified, and EPSS is only 0.15%.
Command injection within Acode on Android lets any locally installed application execute arbitrary shell commands inside Acode's own sandboxed UID, exposing private app data, stored remote credentials, Storage Access Framework grants and granted runtime permissions. The flaw affects builds from 1.11.6 up to but not including 1.12.7, where the terminal plugin exports com.foxdebug.acode.rk.exec.terminal.TerminalService without a binding permission and TerminalService.java performs no caller verification, so a zero-permission hostile app can bind the service and pass an attacker-controlled cmd value via MSG_EXEC. Exploitation is strictly local and requires the victim to already have run a malicious app alongside a vulnerable Acode release; no public exploit code has been identified at time of analysis and there is no CISA KEV listing or EPSS signal reported.
UEFI Secure Boot bypass in Cisco UCS Servers and UCS-based appliances allows authenticated users with 'user' or 'admin' role credentials - or unauthenticated attackers with physical device access - to disable Secure Boot protections and execute unauthorized software at boot time. The flaw stems from UEFI Shell memory-write commands remaining accessible while Secure Boot is active, enabling direct manipulation of Secure Boot validation variables in UEFI memory. A successful exploit undermines firmware integrity controls, potentially allowing persistent pre-OS implants or untrusted bootloaders on enterprise server infrastructure. No public exploit code or CISA KEV entry has been identified at time of analysis.
Markdown Preview Enhanced, the VS Code Markdown preview extension, fails to validate webview-to-extension-host messages prior to version 0.8.30: the handler in src/preview-provider.ts accepts any attacker-supplied _crossnote.{command} plus arbitrary args and forwards it to vscode.commands.executeCommand with no allowlist or type checking. JavaScript already running inside the preview webview - obtainable via the separately tracked .crossnote/head.html script-injection flaw (GHSA-mcwg-4j78-qwv3) - can therefore invoke privileged extension commands such as updateMarkdown, chromeExport, pandocExport, and runCodeChunk with attacker-selected arguments, enabling file writes, code-chunk execution, export-tool execution, and arbitrary URL opening within the victim's workspace context. Exploitation is conditional rather than standalone: it requires a pre-existing webview JavaScript execution primitive and a victim who opens and previews attacker-controlled repository content, and no public exploit code has been identified at time of analysis; both the bridge-abuse bug and its most practical trigger are resolved in 0.8.30.
An insufficiently protected endpoint in Ivanti Neurons Patch for Intune exposes sensitive authentication information to a remote attacker who already holds a valid low-privilege account on the application, per the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, which limits the confirmed impact to confidentiality. Exploitation is low complexity and requires no user interaction, but it is gated by the need for an authenticated session and by network reachability to the management interface, so organizations that keep the console on a trusted admin network materially reduce exposure. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis, and the leaked credential material becomes dangerous mainly if it can be reused against the platform or federated services.
SAP NetWeaver Visual Composer fails to enforce sufficient authorization checks within certain portal functionality, allowing a low-privileged authenticated user to invoke internal operations against a preconfigured remote system; depending on how that remote connection is configured, the attacker could fully compromise the destination system, with high impact on confidentiality, integrity, and availability. The flaw carries a CVSS 3.1 score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting the scope change that carries impact from the vulnerable portal into the connected remote system. Exploitation requires a valid low-privileged portal session (not anonymous access) plus an existing preconfigured remote destination reachable through Visual Composer, and there is currently no public exploit identified at time of analysis.
Arbitrary local program execution is possible in EdgeEver Desktop 1.92.0 through 1.112.0 because the desktop:acp-probe IPC handler performs no sender validation and spawns whatever executable path is supplied in the caller's input.path, running it with the victim user's privileges. This is not a standalone network RCE: an attacker must first land stored cross-site scripting in a renderer through the template-preview or drag-preview feature, and the victim must then preview that attacker-controlled content so the renderer script can invoke probeAcpAdapter (CVSS v4.0 7.3; independent assessment CVSS v3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). No public exploit code and no CISA KEV listing were identified at time of analysis; an upstream fix commit has been referenced, but no patched release version has been independently confirmed.
Remote code execution in NetEase Cloud Music for Windows 3.1.38 and 3.1.39.205426 allows an attacker with an active adversary-in-the-middle position to forge the /pc/upgrade/get upgrade-check response using a publicly known AES key over an unvalidated TLS connection, inject renderer content, and invoke the os.navigateExternal IPC bridge with a file:// URL to execute arbitrary local binaries under the logged-in user. The vendor CVSS 4.0 score is 9.2, and the independent assessment retains high confidentiality, integrity, and availability impact with no privileges or user interaction required, though AC:H reflects the network-position prerequisite; no public exploit identified at time of analysis and no CISA KEV active exploitation is indicated.
JavaScript injection into the WebView of the Joyland AI app (all versions, tracked as CPE cpe:2.3:a:joyland:joyland.ai:*) lets an attacker who shares a network position with the victim and can intercept or tamper with content loaded into the app run arbitrary script inside the app's privileged context; no authentication is required and no user interaction is needed. In the default, unpermissioned install state the attacker can read the device clipboard, make arbitrary HTTP requests through the Weex 'stream' module, and reach app-internal storage, while on devices that previously granted camera, microphone, location, or storage permissions the same flaw escalates to full filesystem, camera, microphone, and GPS access. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no vendor-released patch has been identified; the CVSS 4.0 base score is 9.0 (Critical) and EPSS data was not provided for this record.
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/SQLWin.do endpoint, because the 'sql' request parameter is handed to the database tier without adequate validation or authorization checks (CWE-749, Exposed Dangerous Method or Function). Exploitation requires only a valid low-privileged session (CVSS vector PR:L) plus network reachability to the endpoint, and needs no user interaction; success yields high confidentiality, integrity, and availability impact limited to the Agentflow system itself (VC:H/VI:H/VA:H, SC:N/SI:N/SA:N, score 8.7), meaning database contents can be read, altered, or destroyed. There is no confirmed active exploitation (CISA KEV does not list this CVE) and no public exploit code identified at time of analysis, but the low complexity, low privilege requirement, and network-reachable attack surface make this a high-priority fix for organizations running Agentflow 4.0 builds that predate the 2026/08/28 remediation.
Local privilege escalation in Qualcomm Snapdragon firmware allows an attacker with low privileges to gain high-impact code execution and control over the device. The flaw resides in an exposed dangerous function within a gRPC server (CWE-749) and affects specific QPM (v3.0.127.2, v3.0.126.7, v3.0.125.4) and QSC (v1.21.0, v1.19.1, v1.17.1) builds. Exploitation requires local access and a pre-existing low-privileged foothold; no public exploit or active exploitation has been identified, and EPSS is only 0.15%.
Command injection within Acode on Android lets any locally installed application execute arbitrary shell commands inside Acode's own sandboxed UID, exposing private app data, stored remote credentials, Storage Access Framework grants and granted runtime permissions. The flaw affects builds from 1.11.6 up to but not including 1.12.7, where the terminal plugin exports com.foxdebug.acode.rk.exec.terminal.TerminalService without a binding permission and TerminalService.java performs no caller verification, so a zero-permission hostile app can bind the service and pass an attacker-controlled cmd value via MSG_EXEC. Exploitation is strictly local and requires the victim to already have run a malicious app alongside a vulnerable Acode release; no public exploit code has been identified at time of analysis and there is no CISA KEV listing or EPSS signal reported.
UEFI Secure Boot bypass in Cisco UCS Servers and UCS-based appliances allows authenticated users with 'user' or 'admin' role credentials - or unauthenticated attackers with physical device access - to disable Secure Boot protections and execute unauthorized software at boot time. The flaw stems from UEFI Shell memory-write commands remaining accessible while Secure Boot is active, enabling direct manipulation of Secure Boot validation variables in UEFI memory. A successful exploit undermines firmware integrity controls, potentially allowing persistent pre-OS implants or untrusted bootloaders on enterprise server infrastructure. No public exploit code or CISA KEV entry has been identified at time of analysis.