Sep 4, 2025
3 new incidents, 0 with updates.
Started
- ClosedCriticalPatched
Sitecore Multiple Products: Multiple Products Deserialization of Untrusted Data Vulnerability
Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution. Added to CISA KEV on 2025-09-04.
Sitecore Multiple ProductsClosed Sep 4, 2025
- ClosedHighPatched
Android Runtime: Runtime Use-After-Free Vulnerability
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation. Added to CISA KEV on 2025-09-04.
Android RuntimeClosed Sep 4, 2025
- ClosedHighPatched
Linux Kernel: Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability. Added to CISA KEV on 2025-09-04.
Linux KernelClosed Sep 4, 2025
