Complete article archive
668 published articles · Showing 325–336 · Newest first
Wing FTP Server Information Disclosure (CVE-2025-47813)
Analysis of CVE-2025-47813 in Wing FTP Server, where improper error handling during UID cookie processing can lead to sensitive information disclosure.
Read article →Chromium V8 Memory Buffer Vulnerability CVE-2026-3910
Analysis of a memory buffer vulnerability in the Chromium V8 engine that allows remote code execution within a sandbox via crafted HTML pages.
Read article →Google Skia Out-of-Bounds Write (CVE-2026-3909)
Analysis of a memory corruption vulnerability in the Google Skia library affecting Chrome, Android, and Flutter, focusing on exposure identification and remediation validation.
Read article →n8n Remote Code Execution via Workflow Expression Evaluation
Analysis of CVE-2025-68613, a vulnerability in n8n's workflow expression evaluation system that allows for remote code execution (RCE).
Read article →Omnissa Workspace One UEM SSRF (CVE-2021-22054)
Analysis of a Server-Side Request Forgery vulnerability in Omnissa Workspace One UEM that allows unauthenticated access to sensitive information for actors with network access.
Read article →SolarWinds Web Help Desk Remote Command Execution (CVE-2025-26399)
Analysis of CVE-2025-26399, a deserialization vulnerability in SolarWinds Web Help Desk used in ransomware campaigns, focusing on remediation and verification.
Read article →Ivanti Endpoint Manager Authentication Bypass (CVE-2026-1603)
Analysis of CVE-2026-1603 in Ivanti EPM, focusing on the risk of remote credential leakage via authentication bypass and strategies for verifying remediation.
Read article →Hikvision Improper Authentication Vulnerability (CVE-2017-7921)
Analysis of CVE-2017-7921 affecting multiple Hikvision products, focusing on privilege escalation risks and the verification of vendor-supplied mitigations.
Read article →Rockwell Logix Controller Key Discovery Vulnerability (CVE-2021-22681)
Analysis of CVE-2021-22681, where insufficient protected credentials in Studio 5000 Logix Designer may allow unauthorized applications to connect to Logix controllers.
Read article →Apple Use-After-Free Vulnerability CVE-2023-43000
Analysis of a memory corruption vulnerability affecting macOS, iOS, iPadOS, and Safari 16.6 triggered by crafted web content.
Read article →Apple WebKit Integer Overflow (CVE-2021-30952)
Analysis of an integer overflow vulnerability affecting Safari and multiple Apple operating systems that could allow arbitrary code execution via crafted web content.
Read article →Kernel Privilege Risk in Apple iOS and iPadOS (CVE-2023-41974)
Analysis of CVE-2023-41974, a use-after-free vulnerability in iOS and iPadOS that could allow arbitrary code execution with kernel privileges.
Read article →Page 28 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗