Zero Day Monitor

Zero Day Monitor

106508

New CVEs

251

Critical

74

Pre-CVE

1488

CISA KEV

1484

Articles

38/55

Feeds

Vulnerabilities

cisco · CVE-2026-20131 — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root oKEV

secure_firewall_management_center· CVSS 10.0· CWE-502

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

microsoft · CVE-2026-21514 — Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.KEV

365_apps· CVSS 7.8· CWE-807

microsoft · CVE-2026-21519 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-843

microsoft · CVE-2026-21533 — Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-269

microsoft · CVE-2026-21513 — Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

langflow · CVE-2026-33017 — Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows withouKEV

langflow· CVSS 9.8· CWE-94

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEV

windows_10_1607· CVSS 5.5· CWE-200

microsoft · CVE-2026-21525 — Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.KEV

windows_10_1607· CVSS 6.2· CWE-476

google · CVE-2026-3910 — Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: HiKEV

chrome· CVSS 8.8· CWE-94

→ View full list

Urgent

Schiocco Support Board

langflow langflow