CVE-2025-13223
Google Chromium V8 Type Confusion Vulnerability - Active in CISA KEV catalog.
Critical vulnerabilities, curated daily for security professionals
See how vulnerabilities affect your specific environment
CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework
Monday's vulnerability disclosure reveals two newly published critical vulnerabilities and 17 high-priority CVEs as security teams return to the work week. Seven actively exploited CISA KEV vulnerabilities continue to require remediation. The overall critical CVE frequency shows an 83% decrease compared to historical averages, maintaining the reduced disclosure activity observed over the weekend period.
Immediate action: Security teams should assess the two newly published critical vulnerabilities and review the 17 high-priority CVEs. Organizations should prioritize remediation of the seven actively exploited CISA KEV vulnerabilities.
Google Chromium V8 Type Confusion Vulnerability - Active in CISA KEV catalog.
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability - Active in CISA KEV catalog.
OpenPLC ScadaBR Cross-site Scripting Vulnerability - Active in CISA KEV catalog.
Android Framework Information Disclosure Vulnerability - Active in CISA KEV catalog.
Android Framework Privilege Escalation Vulnerability - Active in CISA KEV catalog.
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability - Active in CISA KEV catalog.
Meta React Server Components Remote Code Execution Vulnerability - Active in CISA KEV catalog.
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolve_import_directory() function in versions 4
The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13
The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up to, and including, 6
A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1
A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1
A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1
A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1
A flaw has been found in UTT θΏε 520W 1
A vulnerability has been found in UTT θΏε 512W up to 1
A weakness has been identified in H3C Magic B1 up to 100R004
A vulnerability was detected in Chanjet CRM up to 20251121
A flaw has been found in Chanjet TPlus up to 20251121
A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2
A weakness has been identified in UGREEN DH2100+ up to 5
A security vulnerability has been detected in UGREEN DH2100+ up to 5