Vulnerabilities
Summary — last 7 days
New vulnerabilities3,043▲ 582 vs. last week
Critical / high1,452▲ 283 vs. last week
New active exploitation (KEV)5▼ 5 vs. last week
Unscored (no CVSS)393▲ 186 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (7) | 0.15% | — | Sevencs Ec2007 KernelSevencs Orca G2 | 12/31/2025 | 6/17/2026 | A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files without verifying… | |
| Analyzed | High (7.8) | 0.15% | — | Sevencs Ec2007 KernelSevencs Orca G2 | 12/31/2025 | 9/28/2026 | An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations,… |