Topic

Browser Zero-Days

Vulnerabilities in web browsers and their scripting engines that are exploited in the wild before or around the time a fix ships, usually reached through a crafted page.

Current clusters

security3 publishers

A CVSS 10.0 Cisco FMC bypass tops the four flaws CISA moved into KEV

CISA says all four are under active exploitation, and three of them are unauthenticated flaws in edge and management appliances. Its own alert cites BOD 26-04 and prints no due date for any of them.

Publishers:cisa.govsecurityaffairs.comthehackernews.com

Reality

Evidence72
Adoption58
Hype gap+12
Incentives52
Confidence70