Threat Intelligence Report — May 21, 2026 | 7 New KEVs · 137 Victims

Report Date: 2026-05-21

New KEVs: 7Critical CVEs: 5Ransomware Victims: 137

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 137 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more

CVE-2025-34291 — Langflow Langflow | CVSS 9.4 CRITICAL

CRITICAL

CVSS 9.4 CRITICAL  ·  EPSS 9%  ·  Langflow Langflow

Read more

Threat Intelligence Report — May 20, 2026 | 7 New KEVs · 135 Victims

Report Date: 2026-05-20

New KEVs: 7Critical CVEs: 5Ransomware Victims: 135

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 135 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more

CVE-2026-41091 — Microsoft Defender | CVSS 7.8 HIGH

HIGH

CVSS 7.8 HIGH  ·  EPSS N/A  ·  Microsoft Defender

Read more

CVE-2010-0806 — Microsoft Internet Explorer | CVSS 9.3 HIGH

HIGH

CVSS 9.3 HIGH  ·  EPSS 89%  ·  Microsoft Internet Explorer

Read more

CVE-2009-3459 — Adobe Acrobat and Reader | CVSS 9.3 HIGH

HIGH

CVSS 9.3 HIGH  ·  EPSS 87%  ·  Adobe Acrobat and Reader

Read more

CVE-2009-1537 — Microsoft DirectX | CVSS 9.3 HIGH

HIGH

CVSS 9.3 HIGH  ·  EPSS 68%  ·  Microsoft DirectX

Read more

CVE-2008-4250 — Microsoft Windows: Code Injection | CVSS 10.0 HIGH

HIGH

CVSS 10.0 HIGH  ·  EPSS 93%  ·  Microsoft Windows

Read more

CVE-2010-0249 — Microsoft Internet Explorer: Use-After-Free | CVSS 8.8 HIGH

HIGH

CVSS 8.8 HIGH  ·  EPSS 90%  ·  Microsoft Internet Explorer

Read more

Threat Intelligence Report — May 19, 2026 | 2 New KEVs · 150 Victims

Report Date: 2026-05-19

New KEVs: 2Critical CVEs: 5Ransomware Victims: 150

2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 150 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more