CVE-2026-43725: WebKit Sandbox Escape Vulnerability
A vulnerability in WebKit that could allow a malicious website to process restricted web content outside the sandbox.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-43722: Apple Kernel Information Leak Vulnerability
A vulnerability that could be exploited by a malicious app to leak sensitive kernel state. Discovered by Hyunwoo Kim.
CVE-2026-43724: Apple Kernel Memory Corruption Vulnerability
A vulnerability that could be exploited by a malicious app to cause unexpected system termination or write kernel memory. Discovered by Hyunwoo…
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
A critical security flaw in Oracle E-Business Suite, tracked as CVE-2026-46817 (CVSS 9.8), is now actively exploited in the wild. The vulnerability,…
CVE-2025-61882: Oracle E-Business Suite Flaw Exploited by Cl0p Ransomware
A critical vulnerability in Oracle E-Business Suite (CVSS 9.8) weaponized by Cl0p ransomware operation, with early attacks since August 2025.
CVE-2026-11720 — Critical vulnerability brief
CVSS 9.3A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes…
CVE-2025-15660 — Vulnerability brief
CVE-2025-15660 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-13135 — Vulnerability brief
CVE-2026-13135 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-11374 — Vulnerability brief
CVE-2026-11374 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-30040 — Vulnerability brief
CVE-2026-30040 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…