60
60
60
60
60
60
60
60
60
60
60
60
U.S. CISA adds Oracle, Mozilla, Microsoft Windows, Linux Kernel, and Microsoft IE flaws to its Known Exploited Vulnerabilities catalog
60
60
60
60
60
60
60
60
60
60
CISA urges to fix actively exploited Firefox zero
60
60
60
60
60
60
60
Google addressed 2 Chrome zero
60
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE
60
60
February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-days
60
60
60
60
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Ray RCE flaw CVE-2025-62593 (CVSS 9.4) to its KEV catalog, ordering federal agencies to patch by August 20, 2026.
CISA added CVE-2025-62593 (CVSS 9.4), a critical remote code execution flaw in the Ray AI compute engine, to its Known Exploited Vulnerabilities catalog with a due date of August 20, 2026. Versions before 2.52.0 relied on a User-Agent header check to guard the dashboard/API, which combined with DNS rebinding allows arbitrary code execution on developers' machines via malicious websites or ads. Aviatrix's analysis describes privilege escalation, lateral movement, command and control, and data exfiltration following exploitation. Federal civilian agencies must remediate under BOD 22-01; the flaw affects Firefox and Safari.
70
60
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
60
60