Oct 14, 2025
3 new incidents, 0 with updates.
Started
- ClosedCriticalPatched
SKYSEA Client View: Client View Improper Authentication Vulnerability
SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program. Added to CISA KEV on 2025-10-14.
SKYSEA Client ViewClosed Oct 14, 2025
- ClosedHighPatched
Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230)
CVE-2025-24990: Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges. CVE-2025-59230: Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2025-10-14.
Microsoft WindowsClosed Oct 14, 2025
- ClosedMediumPatched
IGEL OS: OS Use of a Key Past its Expiration Date Vulnerability
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. Added to CISA KEV on 2025-10-14.
IGEL OSClosed Oct 14, 2025
