Zero Day Monitor

Zero Day Monitor

106431

New CVEs

247

Critical

70

Pre-CVE

1488

CISA KEV

1396

Articles

36/55

Feeds

Vulnerabilities

cisco · CVE-2026-20131 — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root oKEV

secure_firewall_management_center· CVSS 10.0· CWE-502

microsoft · CVE-2026-21533 — Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-269

microsoft · CVE-2026-21514 — Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.KEV

365_apps· CVSS 7.8· CWE-807

microsoft · CVE-2026-21519 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-843

microsoft · CVE-2026-21513 — Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEV

windows_10_1607· CVSS 5.5· CWE-200

microsoft · CVE-2026-21525 — Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.KEV

windows_10_1607· CVSS 6.2· CWE-476

google · CVE-2026-3909 — Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)KEV

chrome· CVSS 8.8· CWE-787

google · CVE-2026-3910 — Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: HiKEV

chrome· CVSS 8.8· CWE-94

→ View full list

Urgent