RU-APT-ChainReaver-L
Critical Severity 5 CVEs CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability (Azure Compute Gallery) CVE-2026-21532 Azure Function Information Disclosure Vulnerability CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability (Azure Compute Gallery) CVE-2026-24300 Azure Front Door (AFD) Elevation of Privilege Vulnerability CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerab
Reprompt
CVE-2026-20822 Critical Windows Graphics Component PRIVILEGE ESCALATION Windows Graphics Component Elevation of Privilege Vulnerability enabling local attackers to gain SYSTEM-level privileges. CVE-2026-20854 Critical Windows LSASS REMOTE CODE EXECUTION Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability allowing network-based exploitation. CVE-2026-20876 Critical Windows VBS Enclave PRIVILEGE ESCALATION Windows
Storm-0249
CVE-2025-62221 High Windows Cloud Files Mini Filter PRIVILEGE ESCALATION EXPLOITED IN WILD Windows Cloud Files Mini Filter Driver EoP allowing attackers to escalate from user context to SYSTEM. Actively used in real-world post-compromise chains. CVE-2025-62454 High Windows Cloud Files Mini Filter PRIVILEGE ESCALATION HIGH EXPLOIT LIKELIHOOD Cloud Files Mini Filter
AppleScript
CVE-2025-30398 Critical Nuance PowerScribe 360 INFO DISCLOSURE Information disclosure vulnerability exposing sensitive medical or system data to unauthorized users. CVE-2025-60716 Critical Windows DirectX Graphics Kernel PRIVILEGE ESCALATION Kernel-mode code execution via crafted graphics calls in DirectX Graphics Kernel subsystem. CVE-2025-62199 Critical Microsoft Office REMOTE CODE EXECUTION Crafted Office files trigger