TrueConf Client downloads application updates without verifying their integrity or authenticity. An attacker who can intercept or influence the update mechanism can deliver a tampered update package, resulting in arbitrary code execution.

TrueConf Client Update Integrity Bypass — Remote Code Execution via Tampered Updates

Chrome

Edge

Brave

Opera

Use-after-free vulnerability in Dawn (WebGPU implementation) in Google Chrome prior to 146.0.7680.178 allows a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability affects all Chromium-based browsers including Chrome, Edge, Brave, Opera, and Vivaldi.

Chrome Release Blog

CISA KEV

The Hacker News

Chromium Bug Tracker

Google Chrome Dawn Use-After-Free Zero-Day (WebGPU)

NetScaler ADC

NetScaler Gateway

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML Identity Provider (IDP) leading to memory overread. This unauthenticated network-exploitable vulnerability allows remote attackers to read sensitive memory contents and potentially achieve remote code execution.

Citrix Security Advisory CTX696300

CISA Known Exploited Vulnerabilities

NVD - CVE-2026-3055

WatchTowr Labs — Citrix NetScaler CVE-2026-3055 Memory Overread Part 2

Citrix NetScaler ADC/Gateway SAML IDP Memory Overread (Critical)

Safari

iPadOS

macOS Sequoia

watchOS

tvOS

visionOS

A buffer overflow vulnerability exists in Apple's WebKit rendering engine (CWE-119). Processing maliciously crafted web content may lead to memory corruption. This vulnerability is one of six zero-days comprising the DarkSword iOS exploit chain, actively used by commercial surveillance vendors and suspected state-sponsored threat actors against targets in Saudi Arabia, Turkey, Malaysia, and Ukraine.

CISA KEV Catalog

Google GTIG — DarkSword Blog

Apple Security Advisory (iOS 18.6)

Apple Security Advisory (macOS Sequoia 15.6)

Full Disclosure Mailing List

Apple DarkSword: WebKit Buffer Overflow Exploited in iOS Spy Campaign

A memory corruption issue (CWE-120 classic buffer overflow) in Apple's kernel memory handling allows a malicious application to cause unexpected system termination or write to kernel memory. This vulnerability is one of six leveraged by the DarkSword iOS full-chain exploit, which has been actively used by commercial surveillance vendors and suspected state-sponsored actors to fully compromise Apple devices running iOS 18.4–18.7.

Apple DarkSword Buffer Overflow — Actively Exploited iOS/macOS Kernel Write

IOS XE

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2026-20127-1772060804671.png

A critical authentication bypass vulnerability in the web management interface of Cisco IOS XE Software allows an unauthenticated, remote attacker to bypass authentication controls and gain administrative access to affected devices.

Cisco Security Advisory

Cisco IOS XE Web UI Authentication Bypass

Cloud Platform

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2026-25108-1772060858399.png

The Acme Cloud Platform versions 4.2.0 through 4.2.8 contains an unauthenticated remote code execution vulnerability in the API gateway component. A remote attacker can execute arbitrary code by sending specially crafted HTTP requests to the management interface.

National Vulnerability Database

Acme Security Advisory

Unauthenticated Remote Code Execution in Acme Cloud Platform

Struts

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2025-49113-1772060883163.png

A critical vulnerability in Apache Struts 2.5.0 through 2.5.30 allows remote attackers to execute arbitrary code via crafted OGNL expressions in HTTP request parameters when Dynamic Method Invocation is enabled.

CVE ID	Title	Severity	CVSS	KEV Date	Fix
CVE-2026-3502	TrueConf Client Update Integrity Bypass — Remote Code Execution via Tampered Updates	high	7.8	Apr 2, 2026	YES
CVE-2026-5281	Google Chrome Dawn Use-After-Free Zero-Day (WebGPU)	high	8.8	Apr 1, 2026	YES
CVE-2026-3055	Citrix NetScaler ADC/Gateway SAML IDP Memory Overread (Critical)	critical	9.8	Mar 31, 2026	YES
CVE-2025-31277	Apple DarkSword: WebKit Buffer Overflow Exploited in iOS Spy Campaign	high	8.8	Mar 20, 2026	YES
CVE-2025-43520	Apple DarkSword Buffer Overflow — Actively Exploited iOS/macOS Kernel Write	medium	5.5	Mar 20, 2026	YES
CVE-2026-20127	Cisco IOS XE Web UI Authentication Bypass	critical	9.8	Mar 15, 2026	YES
CVE-2026-25108	Unauthenticated Remote Code Execution in Acme Cloud Platform	critical	9.8	Mar 15, 2026	YES
CVE-2025-49113	Remote Code Execution in Apache Struts Framework via OGNL Expression Injection	critical	9.8	Mar 15, 2025	YES

Known Exploited VulnerabilitiesACTIVE THREATS