@blamejs/exceptd-skills 0.18.27 → 0.18.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/bin/exceptd.js +25 -8
  3. package/data/_indexes/_meta.json +17 -17
  4. package/data/_indexes/activity-feed.json +35 -35
  5. package/data/_indexes/catalog-summaries.json +8 -8
  6. package/data/_indexes/chains.json +59435 -24
  7. package/data/_indexes/currency.json +6 -6
  8. package/data/_indexes/frequency.json +117 -39
  9. package/data/_indexes/handoff-dag.json +36 -16
  10. package/data/_indexes/jurisdiction-map.json +3 -1
  11. package/data/_indexes/section-offsets.json +166 -148
  12. package/data/_indexes/summary-cards.json +41 -10
  13. package/data/_indexes/token-budget.json +63 -53
  14. package/data/_indexes/xref.json +43 -3
  15. package/data/attack-techniques.json +452 -45
  16. package/data/cve-catalog.json +10507 -18
  17. package/data/cwe-catalog.json +469 -7
  18. package/data/d3fend-catalog.json +41 -8
  19. package/data/framework-control-gaps.json +507 -7
  20. package/data/rfc-references.json +23 -4
  21. package/data/zeroday-lessons.json +8638 -14
  22. package/lib/currency-severity.js +60 -0
  23. package/lib/validate-package.js +5 -3
  24. package/manifest-snapshot.json +40 -6
  25. package/manifest-snapshot.sha256 +1 -1
  26. package/manifest.json +99 -62
  27. package/package.json +2 -2
  28. package/sbom.cdx.json +56 -41
  29. package/skills/global-grc/skill.md +106 -17
  30. package/skills/pqc-first/skill.md +3 -2
  31. package/skills/security-maturity-tiers/skill.md +56 -6
package/data/framework-control-gaps.json CHANGED
@@ -263,27 +263,47 @@
263
263
  "CVE-2013-3918",
264
264
  "CVE-2014-0497",
265
265
  "CVE-2014-0502",
266
+ "CVE-2015-2291",
266
267
  "CVE-2016-3714",
267
268
  "CVE-2016-8735",
268
269
  "CVE-2016-9079",
269
270
  "CVE-2017-3506",
271
+ "CVE-2018-19321",
272
+ "CVE-2018-5430",
270
273
  "CVE-2018-9276",
271
274
  "CVE-2019-16278",
272
275
  "CVE-2020-12641",
273
276
  "CVE-2020-13965",
274
277
  "CVE-2020-17519",
278
+ "CVE-2020-28949",
279
+ "CVE-2020-3153",
275
280
  "CVE-2020-7796",
276
281
  "CVE-2021-21311",
277
282
  "CVE-2021-26828",
278
283
  "CVE-2021-26829",
279
284
  "CVE-2021-3129",
280
285
  "CVE-2021-39144",
286
+ "CVE-2022-21971",
287
+ "CVE-2022-2294",
281
288
  "CVE-2022-23748",
289
+ "CVE-2022-24112",
282
290
  "CVE-2022-27926",
291
+ "CVE-2022-3075",
292
+ "CVE-2022-32893",
293
+ "CVE-2022-32917",
294
+ "CVE-2022-3723",
295
+ "CVE-2022-41049",
296
+ "CVE-2022-41091",
297
+ "CVE-2022-41128",
298
+ "CVE-2022-4135",
299
+ "CVE-2022-41352",
300
+ "CVE-2022-44698",
283
301
  "CVE-2023-20273",
284
302
  "CVE-2023-21237",
285
303
  "CVE-2023-2136",
286
304
  "CVE-2023-21492",
305
+ "CVE-2023-21715",
306
+ "CVE-2023-22952",
287
307
  "CVE-2023-24880",
288
308
  "CVE-2023-26369",
289
309
  "CVE-2023-27350",
@@ -377,6 +397,7 @@
377
397
  "CVE-2026-30623",
378
398
  "CVE-2026-32201",
379
399
  "CVE-2026-32202",
400
+ "CVE-2026-34486",
380
401
  "CVE-2026-34621",
381
402
  "CVE-2026-3910",
382
403
  "CVE-2026-39884",
@@ -386,6 +407,7 @@
386
407
  "CVE-2026-48939",
387
408
  "CVE-2026-5281",
388
409
  "CVE-2026-7482",
410
+ "CVE-2026-9198",
389
411
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
390
412
  "MAL-2026-3083",
391
413
  "MAL-2026-MOIKA-DEPCONFUSION",
@@ -430,6 +452,11 @@
430
452
  "evidence_cves": [
431
453
  "CVE-2021-27878",
432
454
  "CVE-2022-23812",
455
+ "CVE-2022-24990",
456
+ "CVE-2022-26500",
457
+ "CVE-2022-26501",
458
+ "CVE-2022-27593",
459
+ "CVE-2022-36537",
433
460
  "CVE-2024-1708",
434
461
  "CVE-2024-37085"
435
462
  ],
@@ -466,12 +493,23 @@
466
493
  "status": "open",
467
494
  "opened_date": "2026-05-13",
468
495
  "evidence_cves": [
496
+ "CVE-2018-13374",
497
+ "CVE-2021-35587",
498
+ "CVE-2022-26923",
499
+ "CVE-2022-27518",
500
+ "CVE-2022-28810",
501
+ "CVE-2022-35405",
502
+ "CVE-2022-41080",
503
+ "CVE-2022-41082",
504
+ "CVE-2022-41223",
505
+ "CVE-2022-47966",
469
506
  "CVE-2024-39891",
470
507
  "CVE-2025-32975",
471
508
  "CVE-2025-48928",
472
509
  "CVE-2025-55241",
473
510
  "CVE-2025-5777",
474
511
  "CVE-2026-16232",
512
+ "CVE-2026-18577",
475
513
  "CVE-2026-20182"
476
514
  ],
477
515
  "atlas_refs": [
@@ -510,8 +548,13 @@
510
548
  "evidence_cves": [
511
549
  "CVE-2004-1464",
512
550
  "CVE-2008-4250",
551
+ "CVE-2010-2568",
513
552
  "CVE-2010-3962",
514
553
  "CVE-2011-0411",
554
+ "CVE-2011-1823",
555
+ "CVE-2011-4723",
556
+ "CVE-2013-2596",
557
+ "CVE-2013-6282",
515
558
  "CVE-2014-0196",
516
559
  "CVE-2014-100005",
517
560
  "CVE-2014-2120",
@@ -528,6 +571,7 @@
528
571
  "CVE-2016-7836",
529
572
  "CVE-2017-1000253",
530
573
  "CVE-2017-1000353",
574
+ "CVE-2017-11357",
531
575
  "CVE-2017-12637",
532
576
  "CVE-2017-18368",
533
577
  "CVE-2017-3066",
@@ -540,8 +584,13 @@
540
584
  "CVE-2018-14667",
541
585
  "CVE-2018-14933",
542
586
  "CVE-2018-15133",
587
+ "CVE-2018-18809",
588
+ "CVE-2018-19320",
589
+ "CVE-2018-19323",
543
590
  "CVE-2018-19410",
544
591
  "CVE-2018-4063",
592
+ "CVE-2018-6530",
593
+ "CVE-2018-7445",
545
594
  "CVE-2018-8639",
546
595
  "CVE-2019-0344",
547
596
  "CVE-2019-11001",
@@ -569,6 +618,7 @@
569
618
  "CVE-2020-2883",
570
619
  "CVE-2020-3259",
571
620
  "CVE-2020-35730",
621
+ "CVE-2020-5741",
572
622
  "CVE-2020-9715",
573
623
  "CVE-2021-20035",
574
624
  "CVE-2021-20124",
@@ -576,6 +626,7 @@
576
626
  "CVE-2021-22175",
577
627
  "CVE-2021-22555",
578
628
  "CVE-2021-22681",
629
+ "CVE-2021-25369",
579
630
  "CVE-2021-25371",
580
631
  "CVE-2021-25372",
581
632
  "CVE-2021-25394",
@@ -589,11 +640,15 @@
589
640
  "CVE-2021-29256",
590
641
  "CVE-2021-30900",
591
642
  "CVE-2021-30952",
643
+ "CVE-2021-31010",
592
644
  "CVE-2021-31196",
593
645
  "CVE-2021-32030",
594
646
  "CVE-2021-33515",
647
+ "CVE-2021-3493",
595
648
  "CVE-2021-3560",
596
649
  "CVE-2021-36380",
650
+ "CVE-2021-38406",
651
+ "CVE-2021-39226",
597
652
  "CVE-2021-39935",
598
653
  "CVE-2021-40407",
599
654
  "CVE-2021-40655",
@@ -608,26 +663,43 @@
608
663
  "CVE-2022-21445",
609
664
  "CVE-2022-22071",
610
665
  "CVE-2022-22265",
666
+ "CVE-2022-22536",
611
667
  "CVE-2022-22706",
612
668
  "CVE-2022-22948",
669
+ "CVE-2022-22963",
613
670
  "CVE-2022-23227",
614
671
  "CVE-2022-24816",
615
672
  "CVE-2022-2586",
673
+ "CVE-2022-26258",
674
+ "CVE-2022-26352",
616
675
  "CVE-2022-29303",
617
676
  "CVE-2022-3038",
618
677
  "CVE-2022-31199",
678
+ "CVE-2022-3236",
679
+ "CVE-2022-32894",
680
+ "CVE-2022-35914",
681
+ "CVE-2022-37969",
619
682
  "CVE-2022-38028",
620
683
  "CVE-2022-38181",
621
684
  "CVE-2022-39197",
622
685
  "CVE-2022-40799",
686
+ "CVE-2022-41033",
687
+ "CVE-2022-41040",
688
+ "CVE-2022-41125",
623
689
  "CVE-2022-41328",
690
+ "CVE-2022-42475",
691
+ "CVE-2022-4262",
692
+ "CVE-2022-42827",
693
+ "CVE-2022-42856",
624
694
  "CVE-2022-42948",
625
695
  "CVE-2022-43769",
626
696
  "CVE-2022-43939",
697
+ "CVE-2022-44877",
627
698
  "CVE-2022-48503",
628
699
  "CVE-2022-48618",
629
700
  "CVE-2023-0266",
630
701
  "CVE-2023-0386",
702
+ "CVE-2023-0669",
631
703
  "CVE-2023-1389",
632
704
  "CVE-2023-1671",
633
705
  "CVE-2023-20118",
@@ -637,11 +709,14 @@
637
709
  "CVE-2023-20963",
638
710
  "CVE-2023-21529",
639
711
  "CVE-2023-21608",
712
+ "CVE-2023-21674",
640
713
  "CVE-2023-21839",
641
714
  "CVE-2023-22515",
642
715
  "CVE-2023-22518",
643
716
  "CVE-2023-22527",
717
+ "CVE-2023-23376",
644
718
  "CVE-2023-23397",
719
+ "CVE-2023-23529",
645
720
  "CVE-2023-23752",
646
721
  "CVE-2023-24489",
647
722
  "CVE-2023-24955",
@@ -1033,6 +1108,7 @@
1033
1108
  "CVE-2026-1603",
1034
1109
  "CVE-2026-16812",
1035
1110
  "CVE-2026-1731",
1111
+ "CVE-2026-18556",
1036
1112
  "CVE-2026-20045",
1037
1113
  "CVE-2026-20122",
1038
1114
  "CVE-2026-20127",
@@ -1301,6 +1377,8 @@
1301
1377
  "status": "open",
1302
1378
  "opened_date": "2026-05-13",
1303
1379
  "evidence_cves": [
1380
+ "CVE-2022-36537",
1381
+ "CVE-2026-20316",
1304
1382
  "CVE-2026-45321",
1305
1383
  "MAL-2026-SHAI-HULUD-OSS",
1306
1384
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
@@ -1482,7 +1560,8 @@
1482
1560
  "opened_date": "2026-05-13",
1483
1561
  "evidence_cves": [
1484
1562
  "CVE-2026-39987",
1485
- "CVE-2026-42208"
1563
+ "CVE-2026-42208",
1564
+ "CVE-2026-9198"
1486
1565
  ],
1487
1566
  "atlas_refs": [
1488
1567
  "AML.T0010",
@@ -1655,12 +1734,20 @@
1655
1734
  "status": "open",
1656
1735
  "opened_date": "2026-05-13",
1657
1736
  "evidence_cves": [
1737
+ "CVE-2017-5521",
1738
+ "CVE-2018-19321",
1739
+ "CVE-2018-6530",
1740
+ "CVE-2021-38406",
1658
1741
  "CVE-2022-23812",
1742
+ "CVE-2022-26258",
1743
+ "CVE-2022-32893",
1744
+ "CVE-2022-44698",
1659
1745
  "CVE-2024-3094",
1660
1746
  "CVE-2025-12686",
1661
1747
  "CVE-2025-62847",
1662
1748
  "CVE-2025-62848",
1663
1749
  "CVE-2025-62849",
1750
+ "CVE-2026-34486",
1664
1751
  "CVE-2026-42897",
1665
1752
  "CVE-2026-42945",
1666
1753
  "CVE-2026-45321",
@@ -1996,6 +2083,13 @@
1996
2083
  "status": "open",
1997
2084
  "opened_date": "2026-02-01",
1998
2085
  "evidence_cves": [
2086
+ "CVE-2022-27518",
2087
+ "CVE-2022-32894",
2088
+ "CVE-2022-41080",
2089
+ "CVE-2022-41082",
2090
+ "CVE-2022-41128",
2091
+ "CVE-2022-42475",
2092
+ "CVE-2023-22952",
1999
2093
  "CVE-2024-1212",
2000
2094
  "CVE-2024-12686",
2001
2095
  "CVE-2026-15409",
@@ -2036,8 +2130,14 @@
2036
2130
  "evidence_cves": [
2037
2131
  "CVE-2004-1464",
2038
2132
  "CVE-2022-0492",
2133
+ "CVE-2022-22536",
2134
+ "CVE-2022-24706",
2135
+ "CVE-2022-27593",
2039
2136
  "CVE-2022-31199",
2040
2137
  "CVE-2022-36551",
2138
+ "CVE-2022-40684",
2139
+ "CVE-2022-40765",
2140
+ "CVE-2023-0669",
2041
2141
  "CVE-2023-21839",
2042
2142
  "CVE-2023-23397",
2043
2143
  "CVE-2024-0132",
@@ -2084,9 +2184,20 @@
2084
2184
  "status": "open",
2085
2185
  "opened_date": "2026-01-01",
2086
2186
  "evidence_cves": [
2187
+ "CVE-2018-5430",
2188
+ "CVE-2020-28949",
2087
2189
  "CVE-2020-29574",
2088
2190
  "CVE-2020-35730",
2191
+ "CVE-2020-36193",
2192
+ "CVE-2021-25370",
2193
+ "CVE-2022-21587",
2194
+ "CVE-2022-22963",
2195
+ "CVE-2022-26352",
2196
+ "CVE-2022-33891",
2197
+ "CVE-2022-36804",
2198
+ "CVE-2022-37969",
2089
2199
  "CVE-2022-39197",
2200
+ "CVE-2022-44877",
2090
2201
  "CVE-2023-37580",
2091
2202
  "CVE-2023-43472",
2092
2203
  "CVE-2023-6016",
@@ -2133,7 +2244,8 @@
2133
2244
  "CVE-2026-42208",
2134
2245
  "CVE-2026-42271",
2135
2246
  "CVE-2026-45247",
2136
- "CVE-2026-5760"
2247
+ "CVE-2026-5760",
2248
+ "CVE-2026-9198"
2137
2249
  ],
2138
2250
  "atlas_refs": [
2139
2251
  "AML.T0051",
@@ -2220,14 +2332,19 @@
2220
2332
  "CVE-2010-3765",
2221
2333
  "CVE-2010-3962",
2222
2334
  "CVE-2011-0411",
2335
+ "CVE-2011-1823",
2223
2336
  "CVE-2011-3402",
2224
2337
  "CVE-2012-1854",
2225
2338
  "CVE-2012-4792",
2226
2339
  "CVE-2013-0643",
2227
2340
  "CVE-2013-0648",
2341
+ "CVE-2013-2094",
2342
+ "CVE-2013-2596",
2343
+ "CVE-2013-2597",
2228
2344
  "CVE-2013-3163",
2229
2345
  "CVE-2013-3893",
2230
2346
  "CVE-2013-3918",
2347
+ "CVE-2013-6282",
2231
2348
  "CVE-2014-0196",
2232
2349
  "CVE-2014-0497",
2233
2350
  "CVE-2014-0502",
@@ -2258,6 +2375,10 @@
2258
2375
  "CVE-2018-14667",
2259
2376
  "CVE-2018-14933",
2260
2377
  "CVE-2018-15133",
2378
+ "CVE-2018-18809",
2379
+ "CVE-2018-19321",
2380
+ "CVE-2018-19323",
2381
+ "CVE-2018-2628",
2261
2382
  "CVE-2018-4063",
2262
2383
  "CVE-2018-8639",
2263
2384
  "CVE-2019-0344",
@@ -2285,9 +2406,12 @@
2285
2406
  "CVE-2020-25079",
2286
2407
  "CVE-2020-2551",
2287
2408
  "CVE-2020-2883",
2409
+ "CVE-2020-3153",
2288
2410
  "CVE-2020-3259",
2411
+ "CVE-2020-5741",
2289
2412
  "CVE-2020-7796",
2290
2413
  "CVE-2020-9715",
2414
+ "CVE-2020-9934",
2291
2415
  "CVE-2021-20035",
2292
2416
  "CVE-2021-20123",
2293
2417
  "CVE-2021-20124",
@@ -2310,6 +2434,7 @@
2310
2434
  "CVE-2021-29256",
2311
2435
  "CVE-2021-30900",
2312
2436
  "CVE-2021-30952",
2437
+ "CVE-2021-31010",
2313
2438
  "CVE-2021-31196",
2314
2439
  "CVE-2021-3129",
2315
2440
  "CVE-2021-32030",
@@ -2319,6 +2444,7 @@
2319
2444
  "CVE-2021-3560",
2320
2445
  "CVE-2021-36380",
2321
2446
  "CVE-2021-38371",
2447
+ "CVE-2021-38406",
2322
2448
  "CVE-2021-39144",
2323
2449
  "CVE-2021-39935",
2324
2450
  "CVE-2021-40655",
@@ -2338,17 +2464,30 @@
2338
2464
  "CVE-2022-23748",
2339
2465
  "CVE-2022-24816",
2340
2466
  "CVE-2022-2586",
2467
+ "CVE-2022-26258",
2341
2468
  "CVE-2022-27926",
2342
2469
  "CVE-2022-29303",
2343
2470
  "CVE-2022-3038",
2471
+ "CVE-2022-32893",
2472
+ "CVE-2022-32917",
2344
2473
  "CVE-2022-37055",
2474
+ "CVE-2022-3723",
2345
2475
  "CVE-2022-38028",
2346
2476
  "CVE-2022-38181",
2347
2477
  "CVE-2022-40799",
2478
+ "CVE-2022-41033",
2479
+ "CVE-2022-41040",
2348
2480
  "CVE-2022-41328",
2481
+ "CVE-2022-4135",
2482
+ "CVE-2022-41352",
2483
+ "CVE-2022-4262",
2484
+ "CVE-2022-42827",
2485
+ "CVE-2022-42856",
2349
2486
  "CVE-2022-42948",
2350
2487
  "CVE-2022-43769",
2351
2488
  "CVE-2022-43939",
2489
+ "CVE-2022-47966",
2490
+ "CVE-2022-47986",
2352
2491
  "CVE-2022-48503",
2353
2492
  "CVE-2022-48618",
2354
2493
  "CVE-2023-0266",
@@ -2364,9 +2503,12 @@
2364
2503
  "CVE-2023-2136",
2365
2504
  "CVE-2023-21529",
2366
2505
  "CVE-2023-21608",
2506
+ "CVE-2023-21674",
2507
+ "CVE-2023-21823",
2367
2508
  "CVE-2023-22515",
2368
2509
  "CVE-2023-22518",
2369
2510
  "CVE-2023-22527",
2511
+ "CVE-2023-23376",
2370
2512
  "CVE-2023-23752",
2371
2513
  "CVE-2023-24489",
2372
2514
  "CVE-2023-24955",
@@ -2826,6 +2968,7 @@
2826
2968
  "CVE-2026-1340",
2827
2969
  "CVE-2026-1603",
2828
2970
  "CVE-2026-1731",
2971
+ "CVE-2026-18577",
2829
2972
  "CVE-2026-20045",
2830
2973
  "CVE-2026-20122",
2831
2974
  "CVE-2026-20127",
@@ -3060,10 +3203,15 @@
3060
3203
  "opened_date": "2026-05-13",
3061
3204
  "evidence_cves": [
3062
3205
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
3206
+ "CVE-2021-39226",
3063
3207
  "CVE-2021-44026",
3208
+ "CVE-2022-21971",
3209
+ "CVE-2022-2294",
3064
3210
  "CVE-2023-21237",
3065
3211
  "CVE-2023-21608",
3212
+ "CVE-2023-21674",
3066
3213
  "CVE-2023-22515",
3214
+ "CVE-2023-22952",
3067
3215
  "CVE-2023-24955",
3068
3216
  "CVE-2023-36025",
3069
3217
  "CVE-2023-41061",
@@ -3147,9 +3295,12 @@
3147
3295
  "CVE-2010-3962",
3148
3296
  "CVE-2011-3402",
3149
3297
  "CVE-2012-1854",
3298
+ "CVE-2013-2596",
3150
3299
  "CVE-2013-3163",
3151
3300
  "CVE-2013-3918",
3301
+ "CVE-2013-6282",
3152
3302
  "CVE-2014-0196",
3303
+ "CVE-2015-2291",
3153
3304
  "CVE-2016-0165",
3154
3305
  "CVE-2016-3427",
3155
3306
  "CVE-2016-9079",
@@ -3157,6 +3308,8 @@
3157
3308
  "CVE-2017-18368",
3158
3309
  "CVE-2017-7494",
3159
3310
  "CVE-2018-0824",
3311
+ "CVE-2018-19322",
3312
+ "CVE-2018-2628",
3160
3313
  "CVE-2019-1388",
3161
3314
  "CVE-2019-17621",
3162
3315
  "CVE-2019-20500",
@@ -3165,8 +3318,10 @@
3165
3318
  "CVE-2020-12641",
3166
3319
  "CVE-2020-15415",
3167
3320
  "CVE-2020-35730",
3321
+ "CVE-2020-5741",
3168
3322
  "CVE-2020-9715",
3169
3323
  "CVE-2021-22555",
3324
+ "CVE-2021-25370",
3170
3325
  "CVE-2021-25372",
3171
3326
  "CVE-2021-25394",
3172
3327
  "CVE-2021-25487",
@@ -3177,21 +3332,37 @@
3177
3332
  "CVE-2021-29256",
3178
3333
  "CVE-2021-30900",
3179
3334
  "CVE-2021-30952",
3335
+ "CVE-2021-31010",
3180
3336
  "CVE-2021-31196",
3181
3337
  "CVE-2021-3129",
3338
+ "CVE-2021-3493",
3182
3339
  "CVE-2021-41277",
3183
3340
  "CVE-2021-43226",
3184
3341
  "CVE-2022-0185",
3185
3342
  "CVE-2022-1471",
3343
+ "CVE-2022-21587",
3186
3344
  "CVE-2022-22071",
3187
3345
  "CVE-2022-22706",
3188
3346
  "CVE-2022-2586",
3347
+ "CVE-2022-26352",
3189
3348
  "CVE-2022-27926",
3190
3349
  "CVE-2022-29303",
3191
3350
  "CVE-2022-3038",
3351
+ "CVE-2022-3075",
3192
3352
  "CVE-2022-31199",
3353
+ "CVE-2022-32894",
3354
+ "CVE-2022-32917",
3355
+ "CVE-2022-3723",
3193
3356
  "CVE-2022-38181",
3357
+ "CVE-2022-41033",
3358
+ "CVE-2022-41040",
3359
+ "CVE-2022-41080",
3360
+ "CVE-2022-41128",
3361
+ "CVE-2022-42475",
3362
+ "CVE-2022-4262",
3363
+ "CVE-2022-42856",
3194
3364
  "CVE-2022-42948",
3365
+ "CVE-2022-44877",
3195
3366
  "CVE-2022-48503",
3196
3367
  "CVE-2022-48618",
3197
3368
  "CVE-2023-0266",
@@ -3202,7 +3373,9 @@
3202
3373
  "CVE-2023-20963",
3203
3374
  "CVE-2023-2136",
3204
3375
  "CVE-2023-21492",
3376
+ "CVE-2023-21715",
3205
3377
  "CVE-2023-22527",
3378
+ "CVE-2023-23376",
3206
3379
  "CVE-2023-24489",
3207
3380
  "CVE-2023-24880",
3208
3381
  "CVE-2023-26359",
@@ -3390,6 +3563,7 @@
3390
3563
  "CVE-2026-0766",
3391
3564
  "CVE-2026-1281",
3392
3565
  "CVE-2026-1340",
3566
+ "CVE-2026-18577",
3393
3567
  "CVE-2026-20045",
3394
3568
  "CVE-2026-20700",
3395
3569
  "CVE-2026-20805",
@@ -3595,7 +3769,8 @@
3595
3769
  "CVE-2023-20198",
3596
3770
  "CVE-2024-28987",
3597
3771
  "CVE-2024-37085",
3598
- "CVE-2025-53773"
3772
+ "CVE-2025-53773",
3773
+ "CVE-2026-20316"
3599
3774
  ],
3600
3775
  "atlas_refs": [
3601
3776
  "AML.T0051",
@@ -3635,22 +3810,34 @@
3635
3810
  "CVE-2010-3904",
3636
3811
  "CVE-2013-0643",
3637
3812
  "CVE-2013-0648",
3813
+ "CVE-2013-2094",
3814
+ "CVE-2013-2596",
3638
3815
  "CVE-2014-0497",
3639
3816
  "CVE-2016-20017",
3640
3817
  "CVE-2016-3427",
3641
3818
  "CVE-2016-8735",
3819
+ "CVE-2017-11357",
3642
3820
  "CVE-2017-3506",
3643
3821
  "CVE-2017-6742",
3644
3822
  "CVE-2017-7494",
3645
3823
  "CVE-2018-14933",
3824
+ "CVE-2018-19322",
3825
+ "CVE-2018-7445",
3646
3826
  "CVE-2019-16278",
3647
3827
  "CVE-2019-17621",
3648
3828
  "CVE-2021-3129",
3649
3829
  "CVE-2022-0185",
3830
+ "CVE-2022-21971",
3650
3831
  "CVE-2022-23227",
3651
3832
  "CVE-2022-23748",
3833
+ "CVE-2022-24112",
3834
+ "CVE-2022-24706",
3652
3835
  "CVE-2022-2586",
3836
+ "CVE-2022-3236",
3837
+ "CVE-2022-35914",
3653
3838
  "CVE-2022-38028",
3839
+ "CVE-2022-41128",
3840
+ "CVE-2022-47986",
3654
3841
  "CVE-2023-20198",
3655
3842
  "CVE-2023-20273",
3656
3843
  "CVE-2023-25280",
@@ -3702,7 +3889,8 @@
3702
3889
  "CVE-2026-45247",
3703
3890
  "CVE-2026-48172",
3704
3891
  "CVE-2026-56290",
3705
- "CVE-2026-8398"
3892
+ "CVE-2026-8398",
3893
+ "CVE-2026-9198"
3706
3894
  ],
3707
3895
  "atlas_refs": [
3708
3896
  "AML.T0010"
@@ -3772,6 +3960,9 @@
3772
3960
  "opened_date": "2026-04-01",
3773
3961
  "evidence_cves": [
3774
3962
  "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
3963
+ "CVE-2011-4723",
3964
+ "CVE-2022-35405",
3965
+ "CVE-2022-41125",
3775
3966
  "CVE-2023-43791",
3776
3967
  "CVE-2023-47117",
3777
3968
  "CVE-2025-14847",
@@ -3810,7 +4001,14 @@
3810
4001
  "status": "open",
3811
4002
  "opened_date": "2026-05-17",
3812
4003
  "evidence_cves": [
4004
+ "CVE-2018-19321",
4005
+ "CVE-2021-25370",
3813
4006
  "CVE-2022-0492",
4007
+ "CVE-2022-32894",
4008
+ "CVE-2022-37969",
4009
+ "CVE-2022-4135",
4010
+ "CVE-2022-42827",
4011
+ "CVE-2023-21674",
3814
4012
  "CVE-2024-21626",
3815
4013
  "CVE-2025-22224",
3816
4014
  "CVE-2025-22225",
@@ -3871,8 +4069,16 @@
3871
4069
  "CVE-2021-36380",
3872
4070
  "CVE-2021-40655",
3873
4071
  "CVE-2021-44529",
4072
+ "CVE-2022-22536",
3874
4073
  "CVE-2022-24816",
4074
+ "CVE-2022-24990",
4075
+ "CVE-2022-26500",
4076
+ "CVE-2022-26501",
4077
+ "CVE-2022-27593",
3875
4078
  "CVE-2022-36551",
4079
+ "CVE-2022-40765",
4080
+ "CVE-2022-41040",
4081
+ "CVE-2022-42475",
3876
4082
  "CVE-2023-1671",
3877
4083
  "CVE-2023-20198",
3878
4084
  "CVE-2023-20273",
@@ -4029,6 +4235,7 @@
4029
4235
  "opened_date": "2026-04-01",
4030
4236
  "evidence_cves": [
4031
4237
  "CVE-2025-47729",
4238
+ "CVE-2026-34486",
4032
4239
  "CVE-2026-43284",
4033
4240
  "CVE-2026-50751"
4034
4241
  ],
@@ -4062,10 +4269,22 @@
4062
4269
  "status": "open",
4063
4270
  "opened_date": "2026-05-13",
4064
4271
  "evidence_cves": [
4272
+ "CVE-2018-18809",
4273
+ "CVE-2020-28949",
4065
4274
  "CVE-2020-35730",
4275
+ "CVE-2021-35587",
4276
+ "CVE-2022-22963",
4277
+ "CVE-2022-26352",
4066
4278
  "CVE-2022-27926",
4279
+ "CVE-2022-2856",
4280
+ "CVE-2022-3075",
4281
+ "CVE-2022-33891",
4067
4282
  "CVE-2022-36551",
4283
+ "CVE-2022-36804",
4068
4284
  "CVE-2022-39197",
4285
+ "CVE-2022-44877",
4286
+ "CVE-2022-46169",
4287
+ "CVE-2023-22952",
4069
4288
  "CVE-2023-2868",
4070
4289
  "CVE-2023-37580",
4071
4290
  "CVE-2023-44467",
@@ -4212,6 +4431,7 @@
4212
4431
  "CVE-2010-3765",
4213
4432
  "CVE-2010-3962",
4214
4433
  "CVE-2011-0411",
4434
+ "CVE-2011-1823",
4215
4435
  "CVE-2011-3402",
4216
4436
  "CVE-2012-1854",
4217
4437
  "CVE-2012-4792",
@@ -4220,6 +4440,7 @@
4220
4440
  "CVE-2013-3163",
4221
4441
  "CVE-2013-3893",
4222
4442
  "CVE-2013-3918",
4443
+ "CVE-2013-6282",
4223
4444
  "CVE-2014-0196",
4224
4445
  "CVE-2014-0497",
4225
4446
  "CVE-2014-0502",
@@ -4228,6 +4449,7 @@
4228
4449
  "CVE-2014-3931",
4229
4450
  "CVE-2014-6278",
4230
4451
  "CVE-2014-8361",
4452
+ "CVE-2015-2291",
4231
4453
  "CVE-2015-7755",
4232
4454
  "CVE-2016-10033",
4233
4455
  "CVE-2016-6415",
@@ -4245,7 +4467,9 @@
4245
4467
  "CVE-2018-14667",
4246
4468
  "CVE-2018-14933",
4247
4469
  "CVE-2018-15133",
4470
+ "CVE-2018-2628",
4248
4471
  "CVE-2018-4063",
4472
+ "CVE-2018-6530",
4249
4473
  "CVE-2018-8639",
4250
4474
  "CVE-2019-0344",
4251
4475
  "CVE-2019-11001",
@@ -4271,7 +4495,9 @@
4271
4495
  "CVE-2020-2551",
4272
4496
  "CVE-2020-2883",
4273
4497
  "CVE-2020-29574",
4498
+ "CVE-2020-3153",
4274
4499
  "CVE-2020-3259",
4500
+ "CVE-2020-5741",
4275
4501
  "CVE-2020-7796",
4276
4502
  "CVE-2020-9715",
4277
4503
  "CVE-2021-20035",
@@ -4293,6 +4519,7 @@
4293
4519
  "CVE-2021-27876",
4294
4520
  "CVE-2021-30900",
4295
4521
  "CVE-2021-30952",
4522
+ "CVE-2021-31010",
4296
4523
  "CVE-2021-31196",
4297
4524
  "CVE-2021-3129",
4298
4525
  "CVE-2021-32030",
@@ -4300,6 +4527,7 @@
4300
4527
  "CVE-2021-33515",
4301
4528
  "CVE-2021-36380",
4302
4529
  "CVE-2021-38371",
4530
+ "CVE-2021-38406",
4303
4531
  "CVE-2021-39144",
4304
4532
  "CVE-2021-39935",
4305
4533
  "CVE-2021-40407",
@@ -4318,24 +4546,33 @@
4318
4546
  "CVE-2022-22071",
4319
4547
  "CVE-2022-22265",
4320
4548
  "CVE-2022-22706",
4549
+ "CVE-2022-2294",
4321
4550
  "CVE-2022-22948",
4322
4551
  "CVE-2022-23748",
4323
4552
  "CVE-2022-24816",
4324
4553
  "CVE-2022-2586",
4554
+ "CVE-2022-26258",
4325
4555
  "CVE-2022-29303",
4326
4556
  "CVE-2022-3038",
4327
4557
  "CVE-2022-31199",
4558
+ "CVE-2022-32917",
4328
4559
  "CVE-2022-37055",
4560
+ "CVE-2022-3723",
4329
4561
  "CVE-2022-38028",
4330
4562
  "CVE-2022-38181",
4331
4563
  "CVE-2022-40799",
4564
+ "CVE-2022-41080",
4565
+ "CVE-2022-41082",
4332
4566
  "CVE-2022-41328",
4567
+ "CVE-2022-4262",
4568
+ "CVE-2022-42856",
4333
4569
  "CVE-2022-42948",
4334
4570
  "CVE-2022-43769",
4335
4571
  "CVE-2022-43939",
4336
4572
  "CVE-2022-48503",
4337
4573
  "CVE-2022-48618",
4338
4574
  "CVE-2023-0386",
4575
+ "CVE-2023-0669",
4339
4576
  "CVE-2023-1389",
4340
4577
  "CVE-2023-1671",
4341
4578
  "CVE-2023-20109",
@@ -4348,9 +4585,11 @@
4348
4585
  "CVE-2023-21492",
4349
4586
  "CVE-2023-21529",
4350
4587
  "CVE-2023-21608",
4588
+ "CVE-2023-21823",
4351
4589
  "CVE-2023-22515",
4352
4590
  "CVE-2023-22518",
4353
4591
  "CVE-2023-22527",
4592
+ "CVE-2023-23529",
4354
4593
  "CVE-2023-24489",
4355
4594
  "CVE-2023-24955",
4356
4595
  "CVE-2023-25280",
@@ -4835,6 +5074,7 @@
4835
5074
  "CVE-2026-1603",
4836
5075
  "CVE-2026-16812",
4837
5076
  "CVE-2026-1731",
5077
+ "CVE-2026-18577",
4838
5078
  "CVE-2026-20045",
4839
5079
  "CVE-2026-20122",
4840
5080
  "CVE-2026-20127",
@@ -4969,8 +5209,15 @@
4969
5209
  "CVE-2012-4792",
4970
5210
  "CVE-2016-3714",
4971
5211
  "CVE-2018-0824",
5212
+ "CVE-2018-19320",
4972
5213
  "CVE-2020-13965",
5214
+ "CVE-2022-32893",
5215
+ "CVE-2022-41049",
5216
+ "CVE-2022-41091",
5217
+ "CVE-2022-41352",
5218
+ "CVE-2022-44698",
4973
5219
  "CVE-2023-21608",
5220
+ "CVE-2023-21715",
4974
5221
  "CVE-2023-24880",
4975
5222
  "CVE-2023-32049",
4976
5223
  "CVE-2023-36025",
@@ -5047,6 +5294,8 @@
5047
5294
  "status": "open",
5048
5295
  "opened_date": "2026-05-17",
5049
5296
  "evidence_cves": [
5297
+ "CVE-2020-36193",
5298
+ "CVE-2022-47966",
5050
5299
  "CVE-2024-24590",
5051
5300
  "CVE-2024-24591",
5052
5301
  "CVE-2024-3094",
@@ -6049,32 +6298,56 @@
6049
6298
  "status": "open",
6050
6299
  "opened_date": "2026-05-13",
6051
6300
  "evidence_cves": [
6301
+ "CVE-2013-2596",
6052
6302
  "CVE-2015-7755",
6053
6303
  "CVE-2016-7836",
6304
+ "CVE-2017-5521",
6054
6305
  "CVE-2017-7921",
6306
+ "CVE-2018-13374",
6307
+ "CVE-2018-19323",
6055
6308
  "CVE-2018-19410",
6309
+ "CVE-2018-5430",
6056
6310
  "CVE-2018-9276",
6057
6311
  "CVE-2019-19006",
6058
6312
  "CVE-2019-6693",
6059
6313
  "CVE-2020-24363",
6060
6314
  "CVE-2020-2883",
6061
6315
  "CVE-2020-3259",
6316
+ "CVE-2020-3433",
6317
+ "CVE-2020-9934",
6062
6318
  "CVE-2021-20124",
6063
6319
  "CVE-2021-22681",
6320
+ "CVE-2021-25369",
6064
6321
  "CVE-2021-27876",
6065
6322
  "CVE-2021-27877",
6066
6323
  "CVE-2021-27878",
6067
6324
  "CVE-2021-32030",
6068
6325
  "CVE-2021-33044",
6069
6326
  "CVE-2021-33045",
6327
+ "CVE-2021-35587",
6070
6328
  "CVE-2022-1471",
6329
+ "CVE-2022-22536",
6071
6330
  "CVE-2022-22948",
6072
6331
  "CVE-2022-23227",
6332
+ "CVE-2022-24112",
6333
+ "CVE-2022-24706",
6334
+ "CVE-2022-26923",
6335
+ "CVE-2022-27518",
6336
+ "CVE-2022-28810",
6337
+ "CVE-2022-35405",
6338
+ "CVE-2022-40139",
6339
+ "CVE-2022-40684",
6340
+ "CVE-2022-41073",
6341
+ "CVE-2022-41080",
6342
+ "CVE-2022-41082",
6343
+ "CVE-2022-41223",
6344
+ "CVE-2022-47966",
6073
6345
  "CVE-2023-20198",
6074
6346
  "CVE-2023-20269",
6075
6347
  "CVE-2023-20867",
6076
6348
  "CVE-2023-22515",
6077
6349
  "CVE-2023-22518",
6350
+ "CVE-2023-22952",
6078
6351
  "CVE-2023-23397",
6079
6352
  "CVE-2023-23752",
6080
6353
  "CVE-2023-24955",
@@ -6162,10 +6435,12 @@
6162
6435
  "CVE-2026-1603",
6163
6436
  "CVE-2026-16232",
6164
6437
  "CVE-2026-1731",
6438
+ "CVE-2026-18556",
6165
6439
  "CVE-2026-20127",
6166
6440
  "CVE-2026-20128",
6167
6441
  "CVE-2026-20182",
6168
6442
  "CVE-2026-20245",
6443
+ "CVE-2026-20316",
6169
6444
  "CVE-2026-21533",
6170
6445
  "CVE-2026-22769",
6171
6446
  "CVE-2026-23760",
@@ -6221,10 +6496,22 @@
6221
6496
  "opened_date": "2026-05-13",
6222
6497
  "evidence_cves": [
6223
6498
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
6499
+ "CVE-2011-4723",
6224
6500
  "CVE-2014-2120",
6225
6501
  "CVE-2018-14933",
6502
+ "CVE-2018-19320",
6226
6503
  "CVE-2020-10148",
6227
6504
  "CVE-2020-13965",
6505
+ "CVE-2021-39226",
6506
+ "CVE-2022-21971",
6507
+ "CVE-2022-3075",
6508
+ "CVE-2022-32893",
6509
+ "CVE-2022-41033",
6510
+ "CVE-2022-41040",
6511
+ "CVE-2022-41125",
6512
+ "CVE-2022-42827",
6513
+ "CVE-2022-46169",
6514
+ "CVE-2023-23529",
6228
6515
  "CVE-2023-29360",
6229
6516
  "CVE-2023-34048",
6230
6517
  "CVE-2023-36025",
@@ -6252,6 +6539,7 @@
6252
6539
  "CVE-2025-0994",
6253
6540
  "CVE-2025-24016",
6254
6541
  "CVE-2025-27915",
6542
+ "CVE-2026-18577",
6255
6543
  "CVE-2026-32202"
6256
6544
  ],
6257
6545
  "atlas_refs": [
@@ -6289,6 +6577,9 @@
6289
6577
  "status": "open",
6290
6578
  "opened_date": "2026-05-13",
6291
6579
  "evidence_cves": [
6580
+ "CVE-2022-24990",
6581
+ "CVE-2022-26500",
6582
+ "CVE-2022-27593",
6292
6583
  "CVE-2023-41061",
6293
6584
  "CVE-2023-41064",
6294
6585
  "CVE-2023-44487",
@@ -6510,7 +6801,9 @@
6510
6801
  "status": "open",
6511
6802
  "opened_date": "2026-05-15",
6512
6803
  "evidence_cves": [
6513
- "CVE-2023-50387"
6804
+ "CVE-2022-0028",
6805
+ "CVE-2023-50387",
6806
+ "CVE-2026-34486"
6514
6807
  ],
6515
6808
  "atlas_refs": [],
6516
6809
  "attack_refs": [
@@ -7434,6 +7727,7 @@
7434
7727
  "CVE-2018-14667",
7435
7728
  "CVE-2018-14933",
7436
7729
  "CVE-2018-15133",
7730
+ "CVE-2018-19320",
7437
7731
  "CVE-2018-19410",
7438
7732
  "CVE-2018-8639",
7439
7733
  "CVE-2018-9276",
@@ -7448,6 +7742,7 @@
7448
7742
  "CVE-2020-15069",
7449
7743
  "CVE-2020-2551",
7450
7744
  "CVE-2020-29574",
7745
+ "CVE-2020-3153",
7451
7746
  "CVE-2020-3259",
7452
7747
  "CVE-2020-7796",
7453
7748
  "CVE-2021-25371",
@@ -7462,11 +7757,14 @@
7462
7757
  "CVE-2022-22265",
7463
7758
  "CVE-2022-23227",
7464
7759
  "CVE-2022-24816",
7760
+ "CVE-2022-27593",
7761
+ "CVE-2022-33891",
7465
7762
  "CVE-2022-38028",
7466
7763
  "CVE-2022-39197",
7467
7764
  "CVE-2022-40799",
7468
7765
  "CVE-2022-43769",
7469
7766
  "CVE-2022-43939",
7767
+ "CVE-2022-46169",
7470
7768
  "CVE-2023-1671",
7471
7769
  "CVE-2023-20118",
7472
7770
  "CVE-2023-23752",
@@ -7680,9 +7978,16 @@
7680
7978
  "status": "open",
7681
7979
  "opened_date": "2026-05-15",
7682
7980
  "evidence_cves": [
7981
+ "CVE-2013-2094",
7982
+ "CVE-2018-19323",
7983
+ "CVE-2020-28949",
7683
7984
  "CVE-2022-0492",
7684
7985
  "CVE-2022-1471",
7986
+ "CVE-2022-26500",
7987
+ "CVE-2022-35405",
7685
7988
  "CVE-2022-36551",
7989
+ "CVE-2022-41125",
7990
+ "CVE-2022-42827",
7686
7991
  "CVE-2023-22527",
7687
7992
  "CVE-2023-34048",
7688
7993
  "CVE-2023-36845",
@@ -7858,10 +8163,15 @@
7858
8163
  "evidence_cves": [
7859
8164
  "CVE-2014-100005",
7860
8165
  "CVE-2015-5317",
8166
+ "CVE-2018-5430",
7861
8167
  "CVE-2020-29574",
8168
+ "CVE-2020-9934",
8169
+ "CVE-2021-25337",
8170
+ "CVE-2021-39226",
7862
8171
  "CVE-2021-40655",
7863
8172
  "CVE-2021-41277",
7864
8173
  "CVE-2022-0492",
8174
+ "CVE-2022-21587",
7865
8175
  "CVE-2022-36551",
7866
8176
  "CVE-2023-22518",
7867
8177
  "CVE-2023-23752",
@@ -8004,6 +8314,7 @@
8004
8314
  "CVE-2010-3962",
8005
8315
  "CVE-2011-3402",
8006
8316
  "CVE-2012-1854",
8317
+ "CVE-2013-2597",
8007
8318
  "CVE-2013-3893",
8008
8319
  "CVE-2013-3918",
8009
8320
  "CVE-2014-6278",
@@ -8013,6 +8324,8 @@
8013
8324
  "CVE-2016-7836",
8014
8325
  "CVE-2017-1000353",
8015
8326
  "CVE-2017-7921",
8327
+ "CVE-2018-13374",
8328
+ "CVE-2018-19323",
8016
8329
  "CVE-2018-4063",
8017
8330
  "CVE-2018-9276",
8018
8331
  "CVE-2019-11001",
@@ -8023,24 +8336,32 @@
8023
8336
  "CVE-2020-24363",
8024
8337
  "CVE-2020-25078",
8025
8338
  "CVE-2020-25079",
8339
+ "CVE-2020-3433",
8026
8340
  "CVE-2021-22681",
8027
8341
  "CVE-2021-25394",
8028
8342
  "CVE-2021-25395",
8029
8343
  "CVE-2021-26828",
8030
8344
  "CVE-2021-29256",
8031
8345
  "CVE-2021-32030",
8346
+ "CVE-2021-3493",
8032
8347
  "CVE-2021-3560",
8033
8348
  "CVE-2021-40407",
8034
8349
  "CVE-2022-0492",
8035
8350
  "CVE-2022-22948",
8351
+ "CVE-2022-26923",
8352
+ "CVE-2022-36537",
8036
8353
  "CVE-2022-37055",
8037
8354
  "CVE-2022-38028",
8038
8355
  "CVE-2022-40799",
8356
+ "CVE-2022-41033",
8357
+ "CVE-2022-41073",
8358
+ "CVE-2022-41223",
8039
8359
  "CVE-2022-48503",
8040
8360
  "CVE-2023-0266",
8041
8361
  "CVE-2023-0386",
8042
8362
  "CVE-2023-20109",
8043
8363
  "CVE-2023-21529",
8364
+ "CVE-2023-23376",
8044
8365
  "CVE-2023-24955",
8045
8366
  "CVE-2023-2533",
8046
8367
  "CVE-2023-27351",
@@ -8278,6 +8599,12 @@
8278
8599
  "status": "open",
8279
8600
  "opened_date": "2026-05-15",
8280
8601
  "evidence_cves": [
8602
+ "CVE-2018-13374",
8603
+ "CVE-2021-35587",
8604
+ "CVE-2022-26923",
8605
+ "CVE-2022-27518",
8606
+ "CVE-2022-28810",
8607
+ "CVE-2022-41223",
8281
8608
  "CVE-2023-20867",
8282
8609
  "CVE-2023-27532",
8283
8610
  "CVE-2023-38035",
@@ -8329,6 +8656,18 @@
8329
8656
  "opened_date": "2026-05-15",
8330
8657
  "evidence_cves": [
8331
8658
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
8659
+ "CVE-2010-2568",
8660
+ "CVE-2015-2291",
8661
+ "CVE-2018-19320",
8662
+ "CVE-2022-21971",
8663
+ "CVE-2022-2294",
8664
+ "CVE-2022-3075",
8665
+ "CVE-2022-40139",
8666
+ "CVE-2022-41049",
8667
+ "CVE-2022-41091",
8668
+ "CVE-2022-44698",
8669
+ "CVE-2023-21715",
8670
+ "CVE-2023-23529",
8332
8671
  "CVE-2023-24880",
8333
8672
  "CVE-2023-32049",
8334
8673
  "CVE-2023-36025",
@@ -8491,18 +8830,23 @@
8491
8830
  "CVE-2009-3459",
8492
8831
  "CVE-2010-0249",
8493
8832
  "CVE-2010-0806",
8833
+ "CVE-2010-2568",
8494
8834
  "CVE-2010-3765",
8495
8835
  "CVE-2010-3904",
8496
8836
  "CVE-2010-3962",
8497
8837
  "CVE-2011-0411",
8838
+ "CVE-2011-1823",
8498
8839
  "CVE-2011-3402",
8499
8840
  "CVE-2012-1854",
8500
8841
  "CVE-2012-4792",
8501
8842
  "CVE-2013-0643",
8502
8843
  "CVE-2013-0648",
8844
+ "CVE-2013-2094",
8845
+ "CVE-2013-2597",
8503
8846
  "CVE-2013-3163",
8504
8847
  "CVE-2013-3893",
8505
8848
  "CVE-2013-3918",
8849
+ "CVE-2013-6282",
8506
8850
  "CVE-2014-0196",
8507
8851
  "CVE-2014-0497",
8508
8852
  "CVE-2014-0502",
@@ -8510,6 +8854,7 @@
8510
8854
  "CVE-2014-3931",
8511
8855
  "CVE-2014-6278",
8512
8856
  "CVE-2014-8361",
8857
+ "CVE-2015-2291",
8513
8858
  "CVE-2015-5317",
8514
8859
  "CVE-2016-0165",
8515
8860
  "CVE-2016-10033",
@@ -8521,6 +8866,7 @@
8521
8866
  "CVE-2016-9079",
8522
8867
  "CVE-2017-1000253",
8523
8868
  "CVE-2017-1000353",
8869
+ "CVE-2017-11357",
8524
8870
  "CVE-2017-12637",
8525
8871
  "CVE-2017-18368",
8526
8872
  "CVE-2017-3066",
@@ -8532,7 +8878,13 @@
8532
8878
  "CVE-2018-14634",
8533
8879
  "CVE-2018-14667",
8534
8880
  "CVE-2018-15133",
8881
+ "CVE-2018-18809",
8882
+ "CVE-2018-19321",
8883
+ "CVE-2018-19322",
8884
+ "CVE-2018-2628",
8535
8885
  "CVE-2018-4063",
8886
+ "CVE-2018-6530",
8887
+ "CVE-2018-7445",
8536
8888
  "CVE-2018-8639",
8537
8889
  "CVE-2019-0344",
8538
8890
  "CVE-2019-11001",
@@ -8557,8 +8909,12 @@
8557
8909
  "CVE-2020-25078",
8558
8910
  "CVE-2020-25079",
8559
8911
  "CVE-2020-2551",
8912
+ "CVE-2020-28949",
8560
8913
  "CVE-2020-29574",
8914
+ "CVE-2020-3153",
8561
8915
  "CVE-2020-35730",
8916
+ "CVE-2020-36193",
8917
+ "CVE-2020-5741",
8562
8918
  "CVE-2020-7796",
8563
8919
  "CVE-2020-9715",
8564
8920
  "CVE-2021-20035",
@@ -8567,6 +8923,8 @@
8567
8923
  "CVE-2021-22054",
8568
8924
  "CVE-2021-22175",
8569
8925
  "CVE-2021-22555",
8926
+ "CVE-2021-25337",
8927
+ "CVE-2021-25370",
8570
8928
  "CVE-2021-25371",
8571
8929
  "CVE-2021-25372",
8572
8930
  "CVE-2021-25394",
@@ -8580,12 +8938,15 @@
8580
8938
  "CVE-2021-29256",
8581
8939
  "CVE-2021-30900",
8582
8940
  "CVE-2021-30952",
8941
+ "CVE-2021-31010",
8583
8942
  "CVE-2021-31196",
8584
8943
  "CVE-2021-3129",
8585
8944
  "CVE-2021-33515",
8945
+ "CVE-2021-3493",
8586
8946
  "CVE-2021-3560",
8587
8947
  "CVE-2021-36380",
8588
8948
  "CVE-2021-38371",
8949
+ "CVE-2021-38406",
8589
8950
  "CVE-2021-39144",
8590
8951
  "CVE-2021-39935",
8591
8952
  "CVE-2021-40407",
@@ -8601,31 +8962,60 @@
8601
8962
  "CVE-2022-0492",
8602
8963
  "CVE-2022-20775",
8603
8964
  "CVE-2022-21445",
8965
+ "CVE-2022-21587",
8604
8966
  "CVE-2022-22071",
8605
8967
  "CVE-2022-22265",
8606
8968
  "CVE-2022-22706",
8969
+ "CVE-2022-2294",
8970
+ "CVE-2022-22963",
8607
8971
  "CVE-2022-23748",
8608
8972
  "CVE-2022-23812",
8609
8973
  "CVE-2022-24816",
8610
8974
  "CVE-2022-2586",
8975
+ "CVE-2022-26258",
8976
+ "CVE-2022-26352",
8977
+ "CVE-2022-26501",
8611
8978
  "CVE-2022-27926",
8979
+ "CVE-2022-2856",
8612
8980
  "CVE-2022-29303",
8613
8981
  "CVE-2022-3038",
8614
8982
  "CVE-2022-31199",
8983
+ "CVE-2022-3236",
8984
+ "CVE-2022-32894",
8985
+ "CVE-2022-32917",
8986
+ "CVE-2022-33891",
8987
+ "CVE-2022-35914",
8988
+ "CVE-2022-36537",
8615
8989
  "CVE-2022-36551",
8990
+ "CVE-2022-36804",
8616
8991
  "CVE-2022-37055",
8992
+ "CVE-2022-3723",
8993
+ "CVE-2022-37969",
8617
8994
  "CVE-2022-38028",
8618
8995
  "CVE-2022-38181",
8619
8996
  "CVE-2022-39197",
8997
+ "CVE-2022-40765",
8620
8998
  "CVE-2022-40799",
8999
+ "CVE-2022-41049",
9000
+ "CVE-2022-41091",
9001
+ "CVE-2022-41128",
8621
9002
  "CVE-2022-41328",
9003
+ "CVE-2022-4135",
9004
+ "CVE-2022-41352",
9005
+ "CVE-2022-42475",
9006
+ "CVE-2022-4262",
9007
+ "CVE-2022-42856",
8622
9008
  "CVE-2022-42948",
8623
9009
  "CVE-2022-43769",
8624
9010
  "CVE-2022-43939",
9011
+ "CVE-2022-44698",
9012
+ "CVE-2022-44877",
9013
+ "CVE-2022-47986",
8625
9014
  "CVE-2022-48503",
8626
9015
  "CVE-2022-48618",
8627
9016
  "CVE-2023-0266",
8628
9017
  "CVE-2023-0386",
9018
+ "CVE-2023-0669",
8629
9019
  "CVE-2023-1389",
8630
9020
  "CVE-2023-1671",
8631
9021
  "CVE-2023-20109",
@@ -8639,8 +9029,12 @@
8639
9029
  "CVE-2023-21492",
8640
9030
  "CVE-2023-21529",
8641
9031
  "CVE-2023-21608",
9032
+ "CVE-2023-21674",
9033
+ "CVE-2023-21715",
9034
+ "CVE-2023-21823",
8642
9035
  "CVE-2023-21839",
8643
9036
  "CVE-2023-22527",
9037
+ "CVE-2023-23376",
8644
9038
  "CVE-2023-24489",
8645
9039
  "CVE-2023-24880",
8646
9040
  "CVE-2023-25280",
@@ -9207,6 +9601,7 @@
9207
9601
  "CVE-2026-7482",
9208
9602
  "CVE-2026-8398",
9209
9603
  "CVE-2026-9082",
9604
+ "CVE-2026-9198",
9210
9605
  "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
9211
9606
  "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
9212
9607
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -9248,20 +9643,40 @@
9248
9643
  "opened_date": "2026-05-17",
9249
9644
  "evidence_cves": [
9250
9645
  "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
9646
+ "CVE-2013-2094",
9647
+ "CVE-2017-5521",
9648
+ "CVE-2018-19322",
9649
+ "CVE-2018-2628",
9251
9650
  "CVE-2019-7256",
9252
9651
  "CVE-2020-29574",
9652
+ "CVE-2020-3433",
9653
+ "CVE-2020-36193",
9654
+ "CVE-2020-9934",
9253
9655
  "CVE-2021-20123",
9656
+ "CVE-2021-25370",
9254
9657
  "CVE-2021-33044",
9255
9658
  "CVE-2021-33045",
9256
9659
  "CVE-2021-38371",
9257
9660
  "CVE-2021-44207",
9661
+ "CVE-2022-0028",
9258
9662
  "CVE-2022-0492",
9259
9663
  "CVE-2022-1471",
9664
+ "CVE-2022-21587",
9665
+ "CVE-2022-24706",
9666
+ "CVE-2022-2856",
9667
+ "CVE-2022-33891",
9260
9668
  "CVE-2022-36551",
9669
+ "CVE-2022-36804",
9261
9670
  "CVE-2022-37055",
9671
+ "CVE-2022-40684",
9672
+ "CVE-2022-40765",
9673
+ "CVE-2022-41073",
9674
+ "CVE-2022-46169",
9675
+ "CVE-2022-47986",
9262
9676
  "CVE-2023-20109",
9263
9677
  "CVE-2023-20198",
9264
9678
  "CVE-2023-20269",
9679
+ "CVE-2023-21823",
9265
9680
  "CVE-2023-33107",
9266
9681
  "CVE-2023-33246",
9267
9682
  "CVE-2023-36033",
@@ -9374,6 +9789,7 @@
9374
9789
  "CVE-2026-11645",
9375
9790
  "CVE-2026-15409",
9376
9791
  "CVE-2026-20245",
9792
+ "CVE-2026-20316",
9377
9793
  "CVE-2026-21858",
9378
9794
  "CVE-2026-21877",
9379
9795
  "CVE-2026-22218",
@@ -9449,6 +9865,7 @@
9449
9865
  "status": "open",
9450
9866
  "opened_date": "2026-05-17",
9451
9867
  "evidence_cves": [
9868
+ "CVE-2017-11357",
9452
9869
  "CVE-2024-9537",
9453
9870
  "CVE-2025-24200",
9454
9871
  "CVE-2025-34291",
@@ -9486,12 +9903,23 @@
9486
9903
  "status": "open",
9487
9904
  "opened_date": "2026-05-17",
9488
9905
  "evidence_cves": [
9906
+ "CVE-2011-4723",
9907
+ "CVE-2013-2597",
9908
+ "CVE-2017-11357",
9909
+ "CVE-2018-18809",
9489
9910
  "CVE-2020-10148",
9911
+ "CVE-2020-36193",
9912
+ "CVE-2021-25337",
9490
9913
  "CVE-2021-39144",
9491
9914
  "CVE-2021-45046",
9915
+ "CVE-2022-22963",
9492
9916
  "CVE-2022-23748",
9493
9917
  "CVE-2022-23812",
9918
+ "CVE-2022-36804",
9919
+ "CVE-2022-40139",
9494
9920
  "CVE-2022-41328",
9921
+ "CVE-2022-41352",
9922
+ "CVE-2022-47966",
9495
9923
  "CVE-2024-11120",
9496
9924
  "CVE-2024-21626",
9497
9925
  "CVE-2024-24590",
@@ -9508,6 +9936,7 @@
9508
9936
  "CVE-2025-3935",
9509
9937
  "CVE-2025-54313",
9510
9938
  "CVE-2025-59287",
9939
+ "CVE-2026-18556",
9511
9940
  "CVE-2026-30615",
9512
9941
  "CVE-2026-30623",
9513
9942
  "CVE-2026-31229",
@@ -9653,9 +10082,15 @@
9653
10082
  "opened_date": "2026-05-18",
9654
10083
  "evidence_cves": [
9655
10084
  "CVE-2020-10148",
10085
+ "CVE-2021-25337",
9656
10086
  "CVE-2021-27876",
9657
10087
  "CVE-2021-27877",
10088
+ "CVE-2021-35587",
10089
+ "CVE-2021-39226",
9658
10090
  "CVE-2021-44207",
10091
+ "CVE-2022-28810",
10092
+ "CVE-2022-35405",
10093
+ "CVE-2022-41223",
9659
10094
  "CVE-2023-20198",
9660
10095
  "CVE-2023-20269",
9661
10096
  "CVE-2023-20867",
@@ -9680,6 +10115,7 @@
9680
10115
  "CVE-2025-3248",
9681
10116
  "CVE-2025-55241",
9682
10117
  "CVE-2026-16232",
10118
+ "CVE-2026-18556",
9683
10119
  "CVE-2026-20182",
9684
10120
  "CVE-2026-24206",
9685
10121
  "CVE-2026-24207",
@@ -9721,6 +10157,10 @@
9721
10157
  "status": "open",
9722
10158
  "opened_date": "2026-05-18",
9723
10159
  "evidence_cves": [
10160
+ "CVE-2022-24990",
10161
+ "CVE-2022-26500",
10162
+ "CVE-2022-26501",
10163
+ "CVE-2022-36537",
9724
10164
  "CVE-2024-20481",
9725
10165
  "CVE-2024-3393",
9726
10166
  "CVE-2024-40711",
@@ -9756,6 +10196,7 @@
9756
10196
  "status": "open",
9757
10197
  "opened_date": "2026-05-18",
9758
10198
  "evidence_cves": [
10199
+ "CVE-2017-5521",
9759
10200
  "CVE-2018-19410",
9760
10201
  "CVE-2020-10148",
9761
10202
  "CVE-2021-27877",
@@ -9765,6 +10206,9 @@
9765
10206
  "CVE-2021-44207",
9766
10207
  "CVE-2022-1471",
9767
10208
  "CVE-2022-23227",
10209
+ "CVE-2022-27518",
10210
+ "CVE-2022-28810",
10211
+ "CVE-2022-40684",
9768
10212
  "CVE-2023-20269",
9769
10213
  "CVE-2023-20867",
9770
10214
  "CVE-2023-27532",
@@ -9806,6 +10250,7 @@
9806
10250
  "CVE-2026-0257",
9807
10251
  "CVE-2026-10520",
9808
10252
  "CVE-2026-16232",
10253
+ "CVE-2026-18556",
9809
10254
  "CVE-2026-20182",
9810
10255
  "CVE-2026-24206",
9811
10256
  "CVE-2026-24207",
@@ -9927,6 +10372,7 @@
9927
10372
  "CVE-2008-4128",
9928
10373
  "CVE-2008-4250",
9929
10374
  "CVE-2010-0806",
10375
+ "CVE-2010-2568",
9930
10376
  "CVE-2011-0411",
9931
10377
  "CVE-2014-2120",
9932
10378
  "CVE-2014-3931",
@@ -9943,6 +10389,7 @@
9943
10389
  "CVE-2017-6884",
9944
10390
  "CVE-2017-7921",
9945
10391
  "CVE-2018-4063",
10392
+ "CVE-2018-7445",
9946
10393
  "CVE-2019-19006",
9947
10394
  "CVE-2019-7256",
9948
10395
  "CVE-2020-13965",
@@ -9951,6 +10398,7 @@
9951
10398
  "CVE-2020-25078",
9952
10399
  "CVE-2020-25079",
9953
10400
  "CVE-2020-2883",
10401
+ "CVE-2020-3433",
9954
10402
  "CVE-2021-20035",
9955
10403
  "CVE-2021-20123",
9956
10404
  "CVE-2021-20124",
@@ -9969,16 +10417,28 @@
9969
10417
  "CVE-2021-39935",
9970
10418
  "CVE-2021-40407",
9971
10419
  "CVE-2021-40655",
10420
+ "CVE-2022-0028",
9972
10421
  "CVE-2022-20775",
10422
+ "CVE-2022-22536",
9973
10423
  "CVE-2022-22948",
10424
+ "CVE-2022-24112",
10425
+ "CVE-2022-24706",
10426
+ "CVE-2022-2856",
10427
+ "CVE-2022-3236",
10428
+ "CVE-2022-35914",
9974
10429
  "CVE-2022-36551",
9975
10430
  "CVE-2022-37055",
10431
+ "CVE-2022-40684",
10432
+ "CVE-2022-40765",
10433
+ "CVE-2022-41091",
10434
+ "CVE-2023-0669",
9976
10435
  "CVE-2023-20109",
9977
10436
  "CVE-2023-20198",
9978
10437
  "CVE-2023-20269",
9979
10438
  "CVE-2023-20273",
9980
10439
  "CVE-2023-21839",
9981
10440
  "CVE-2023-23397",
10441
+ "CVE-2023-23529",
9982
10442
  "CVE-2023-25280",
9983
10443
  "CVE-2023-25717",
9984
10444
  "CVE-2023-28434",
@@ -10159,6 +10619,8 @@
10159
10619
  "status": "open",
10160
10620
  "opened_date": "2026-05-18",
10161
10621
  "evidence_cves": [
10622
+ "CVE-2022-24990",
10623
+ "CVE-2022-26501",
10162
10624
  "CVE-2025-22224",
10163
10625
  "CVE-2025-59389"
10164
10626
  ],
@@ -10226,6 +10688,9 @@
10226
10688
  "status": "open",
10227
10689
  "opened_date": "2026-05-18",
10228
10690
  "evidence_cves": [
10691
+ "CVE-2013-2597",
10692
+ "CVE-2021-25337",
10693
+ "CVE-2022-40139",
10229
10694
  "MAL-2026-SHAI-HULUD-OSS"
10230
10695
  ],
10231
10696
  "atlas_refs": [
@@ -10386,6 +10851,7 @@
10386
10851
  "status": "open",
10387
10852
  "opened_at": "2026-05-18",
10388
10853
  "evidence_cves": [
10854
+ "CVE-2021-25369",
10389
10855
  "CVE-2025-21085",
10390
10856
  "CVE-2025-21391"
10391
10857
  ],
@@ -10415,6 +10881,7 @@
10415
10881
  "status": "open",
10416
10882
  "opened_at": "2026-05-18",
10417
10883
  "evidence_cves": [
10884
+ "CVE-2021-25369",
10418
10885
  "CVE-2023-21492",
10419
10886
  "CVE-2025-21085"
10420
10887
  ],
@@ -10507,15 +10974,27 @@
10507
10974
  "CVE-2010-3904",
10508
10975
  "CVE-2016-3427",
10509
10976
  "CVE-2016-8735",
10977
+ "CVE-2017-5521",
10510
10978
  "CVE-2017-7494",
10979
+ "CVE-2018-19322",
10511
10980
  "CVE-2018-19410",
10981
+ "CVE-2018-6530",
10512
10982
  "CVE-2018-9276",
10513
10983
  "CVE-2019-11001",
10514
10984
  "CVE-2019-7256",
10515
10985
  "CVE-2020-15415",
10986
+ "CVE-2020-3433",
10987
+ "CVE-2021-3493",
10516
10988
  "CVE-2021-40407",
10517
10989
  "CVE-2021-41277",
10990
+ "CVE-2022-0028",
10518
10991
  "CVE-2022-22948",
10992
+ "CVE-2022-24112",
10993
+ "CVE-2022-2856",
10994
+ "CVE-2022-3236",
10995
+ "CVE-2022-35914",
10996
+ "CVE-2022-41073",
10997
+ "CVE-2022-46169",
10519
10998
  "CVE-2023-20273",
10520
10999
  "CVE-2023-25280",
10521
11000
  "CVE-2023-27524",
@@ -10600,13 +11079,18 @@
10600
11079
  "status": "open",
10601
11080
  "opened_at": "2026-05-18",
10602
11081
  "evidence_cves": [
11082
+ "CVE-2011-4723",
10603
11083
  "CVE-2016-6415",
11084
+ "CVE-2018-13374",
11085
+ "CVE-2022-26923",
11086
+ "CVE-2022-41125",
10604
11087
  "CVE-2024-43451",
10605
11088
  "CVE-2025-14847",
10606
11089
  "CVE-2025-22226",
10607
11090
  "CVE-2025-23209",
10608
11091
  "CVE-2025-47729",
10609
- "CVE-2025-69286"
11092
+ "CVE-2025-69286",
11093
+ "CVE-2026-34486"
10610
11094
  ],
10611
11095
  "theater_test": {
10612
11096
  "claim": "We are compliant with A.8.24 (Use of cryptography) because we follow the documented requirement: Annex A.8.24 — defining and implementing rules for the effective use of cryptography, including key management. Anchored on the assumption that correctly-applied transport and at-rest encryption prese",
@@ -10700,6 +11184,7 @@
10700
11184
  "opened_at": "2026-05-18",
10701
11185
  "evidence_cves": [
10702
11186
  "CVE-2004-1464",
11187
+ "CVE-2022-0028",
10703
11188
  "CVE-2025-59529",
10704
11189
  "CVE-2025-8671",
10705
11190
  "CVE-2026-28318"
@@ -10996,6 +11481,7 @@
10996
11481
  "status": "open",
10997
11482
  "opened_at": "2026-05-18",
10998
11483
  "evidence_cves": [
11484
+ "CVE-2018-7445",
10999
11485
  "CVE-2024-12450",
11000
11486
  "CVE-2025-22224",
11001
11487
  "CVE-2025-22225"
@@ -11235,6 +11721,7 @@
11235
11721
  "CVE-2022-23812",
11236
11722
  "CVE-2024-40890",
11237
11723
  "CVE-2024-50623",
11724
+ "CVE-2026-20316",
11238
11725
  "CVE-2026-45321",
11239
11726
  "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
11240
11727
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -11575,7 +12062,8 @@
11575
12062
  "status": "open",
11576
12063
  "opened_date": "2026-05-18",
11577
12064
  "evidence_cves": [
11578
- "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY"
12065
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
12066
+ "CVE-2010-2568"
11579
12067
  ],
11580
12068
  "theater_test": {
11581
12069
  "claim": "Storage-media confidentiality controls defeat stolen-device confidentiality breach per NIST 800-53 MP-7.",
@@ -11651,11 +12139,22 @@
11651
12139
  "status": "open",
11652
12140
  "opened_date": "2026-05-18",
11653
12141
  "evidence_cves": [
12142
+ "CVE-2011-1823",
12143
+ "CVE-2018-5430",
11654
12144
  "CVE-2019-16278",
11655
12145
  "CVE-2019-6693",
11656
12146
  "CVE-2020-17103-REREGRESSION-2026",
12147
+ "CVE-2020-9934",
12148
+ "CVE-2021-25369",
11657
12149
  "CVE-2022-0492",
12150
+ "CVE-2022-37969",
12151
+ "CVE-2022-41049",
12152
+ "CVE-2022-41073",
12153
+ "CVE-2022-41082",
12154
+ "CVE-2022-4135",
12155
+ "CVE-2022-47986",
11658
12156
  "CVE-2023-21529",
12157
+ "CVE-2023-21823",
11659
12158
  "CVE-2023-22518",
11660
12159
  "CVE-2023-26083",
11661
12160
  "CVE-2023-26369",
@@ -11831,6 +12330,7 @@
11831
12330
  "status": "open",
11832
12331
  "opened_date": "2026-05-28",
11833
12332
  "evidence_cves": [
12333
+ "CVE-2022-40139",
11834
12334
  "CVE-2025-30066",
11835
12335
  "CVE-2026-48027",
11836
12336
  "CVE-2026-8398",