Vulnerabilities on skulldchttps://skulldc.net/categories/vulnerabilities/Recent content in Vulnerabilities on skulldcHugoen-usThu, 05 Nov 2026 20:26:25 +0000CISA lists WordPress Core upgrade-window race condition CVE-2026-119977 as exploitedhttps://skulldc.net/2026/11/cisa-lists-wordpress-core-upgrade-window-race-condition-cve-2026-11997/Thu, 05 Nov 2026 20:26:25 +0000https://skulldc.net/2026/11/cisa-lists-wordpress-core-upgrade-window-race-condition-cve-2026-11997/A race in WordPress Core full-package upgrades lets unauthenticated attackers run code in versions 4.7 through 7.1.3; CISA now lists it as exploited.CISA adds Apple pointer authentication bypass CVE-2024-27834 to the KEV cataloghttps://skulldc.net/2026/11/cisa-adds-apple-pointer-authentication-bypass-cve-2024-27834-to-the-ke/Thu, 05 Nov 2026 10:25:39 +0000https://skulldc.net/2026/11/cisa-adds-apple-pointer-authentication-bypass-cve-2024-27834-to-the-ke/CISA now lists CVE-2024-27834, an Apple Pointer Authentication bypass first published in NVD in 2024, as exploited; federal agencies must act by 2026-11-18.