Vulnerabilities
Summary — last 7 days
New vulnerabilities4,800▲ 1,985 vs. last week
Critical / high2,645▲ 1,245 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)218▲ 46 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Low (3.4) | 0.14% | — | Wizards OF THE Coast Magic THE Gathering ArenaAI | 10/8/2026 | 10/10/2026 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application.OpenURL/ShellExecuteW without validating the URI scheme or domain. A hypothetical… |