CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-04-13 (13)

2026-04-13 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-04-13

13 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-25205 — 9.8 — Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335 .
  • CVE-2026-25207 — 9.8 — Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
  • CVE-2026-25208 — 9.8 — Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
  • CVE-2026-40446 — 9.8 — Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
  • CVE-2026-31414 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding …
  • CVE-2026-25206 — 9.1 — Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
  • CVE-2026-25209 — 9.1 — Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
  • CVE-2012-1854 — 0.0 — Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. [KEV]
  • CVE-2025-60710 — 0.0 — Microsoft Windows contains a link following vulnerability that allows for privilege escalation [KEV]
  • CVE-2023-21529 — 0.0 — Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. [KEV]
  • CVE-2023-36424 — 0.0 — Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation [KEV]
  • CVE-2020-9715 — 0.0 — Adobe Acrobat contains a use-after-free vulnerability that allows for code execution [KEV]
  • CVE-2026-34621 — 0.0 — Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.