CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-02-10 (7)

2026-02-10 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-02-10

7 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-23906 — 9.8 — Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0) * Prerequisites: * druid-basic-security extension enabled * LDAP authenticator configured * Underlying…
  • CVE-2026-21513 — 0.0 — Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. [KEV]
  • CVE-2026-21525 — 0.0 — Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally. [KEV]
  • CVE-2026-21510 — 0.0 — Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. [KEV]
  • CVE-2026-21533 — 0.0 — Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally. [KEV]
  • CVE-2026-21519 — 0.0 — Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally. [KEV]
  • CVE-2026-21514 — 0.0 — Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.