4 reportsPriority High
Multiple software vulnerabilities reported
Several critical vulnerabilities have been identified in widely used software products, posing potential risks to UK organisations if exploited.
First report Latest
What is going on
- A vulnerability in Meta Platforms WhatsApp allows incorrect authorisation of linked device synchronisation messages, with reports of exploitation in the wild.
- A remote code execution vulnerability affects multiple Mozilla products, though no specific exploitation details have been provided.
- Cisco Identity Services Engine has a vulnerability involving incorrect use of privileged APIs, with a high probability of exploitation reported.
- Check Point products are affected by a critical vulnerability that allows incorrect permission assignments to critical resources, leading to potential privilege escalation and reported exploitation.
- What to watch: Further confirmation of active exploitation and availability of patches for affected systems.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority HighType Vulnerability
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
- Priority HighType VulnerabilityLead report
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Priority MediumType Vulnerability
Meta Platforms WhatsApp Incorrect Authorisation Vulnerability
- Priority MediumType Vulnerability
Mozilla Multiple Products Remote Code Execution Vulnerability

