Threat Landscape — Top Critical CVEs This Week
Week of October 18, 2026 — Last updated: 2026-10-18 01:52 UTC
38
CRITICAL
74
HIGH
112
CVEs
| CVE ID | Severity | Description | CVSS |
|---|---|---|---|
| CVE-2020-1938 | CRITICAL | When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.… | 9.8 |
| CVE-2021-4034 | HIGH | A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid… | 7.8 |
| CVE-2021-44228 | CRITICAL | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in… | 10.0 |
| CVE-2022-28368 | CRITICAL | Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets… | 9.8 |
| CVE-2023-46805 | HIGH | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a… | 8.2 |
These are just the top CVEs. The app gives you the full picture.
EPSS probability scores, KEV cross-referencing, tech stack filtering, and real-time alerts on Slack/Teams — personalized to YOUR role.
Start Free Trial — 14 Days →