September 2026
CVE-2026-21510: Windows Shell and SmartScreen warning bypassNew!!
CISA lists CVE-2026-21510 as exploited. TechGeeks action notice for Windows Shell and SmartScreen warning bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21513: Windows MSHTML security-feature bypassNew!!
CISA lists CVE-2026-21513 as exploited. TechGeeks action notice for Windows MSHTML security-feature bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21514: Microsoft Word OLE protection bypassNew!!
CISA lists CVE-2026-21514 as exploited. TechGeeks action notice for Microsoft Word OLE protection bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21519: Desktop Window Manager local privilege escalationNew!!
CISA lists CVE-2026-21519 as exploited. TechGeeks action notice for Desktop Window Manager local privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21525: Windows Remote Access Connection Manager denial of serviceNew!!
CISA lists CVE-2026-21525 as exploited. TechGeeks action notice for Windows Remote Access Connection Manager denial of service, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21533: Windows Remote Desktop Services local privilege escalationNew!!
CISA lists CVE-2026-21533 as exploited. TechGeeks action notice for Windows Remote Desktop Services local privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2024-43468: Configuration Manager unauthenticated SQL injectionNew!!
CISA lists CVE-2024-43468 as exploited. TechGeeks action notice for Configuration Manager unauthenticated SQL injection, with scope, remediation, investigation guidance, and official sources.
CVE-2026-20700: Apple dyld arbitrary code execution in a targeted exploit chainNew!!
CISA lists CVE-2026-20700 as exploited. TechGeeks action notice for Apple dyld arbitrary code execution in a targeted exploit chain, with scope, remediation, investigation guidance, and official sources.
CVE-2008-0015: Legacy Windows Video ActiveX Control RCENew!!
CISA lists CVE-2008-0015 as exploited. TechGeeks action notice for Legacy Windows Video ActiveX Control RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2022-20775: Cisco SD-WAN authenticated local path traversal to rootNew!!
CISA lists CVE-2022-20775 as exploited. TechGeeks action notice for Cisco SD-WAN authenticated local path traversal to root, with scope, remediation, investigation guidance, and official sources.