Critical SAP NetWeaver RCE Exploited in the Wild, CISA Adds 3 to KEV, and a Chrome Zero-Day Gets Emergency Patched

News

CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA expanded its KEV catalog with three actively exploited vulnerabilities, including flaws in enterprise software that defenders need to patch immediately. If your org follows BOD 22-01, your clock is already ticking on remediation deadlines.

Google Releases Emergency Chrome Patch for Actively Exploited Type Confusion Bug

Google pushed an out-of-band Chrome update patching a type confusion vulnerability in the V8 JavaScript engine that is confirmed exploited in the wild. Type confusion in V8 is a reliable sandbox escape path, so update your fleet before someone weaponizes a public PoC.

Tools

Nuclei Template Library Adds Coverage for SAP NetWeaver and Recent CISA KEV Entries

The Nuclei community pushed new detection templates for the SAP NetWeaver flaw and several freshly added KEV entries within hours of disclosure. If you are running continuous attack surface management, pulling the latest template pack today gives you immediate detection coverage without waiting on your scanner vendor.