NVD disclosure day
CVE-2025-20352
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Cisco IOS and IOS XE Software have a vulnerability in their SNMP subsystem that allows authenticated attackers to cause denial of service or execute code as root. This impacts network device availability and control. The business risk involves potential service disruption and unauthorized system access.
CVE-2025-10890
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A side-channel vulnerability in Google Chrome allows remote attackers to leak cross-origin data via a crafted HTML page. This could lead to the disclosure of sensitive information from other websites.
CVE-2025-10585
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A type confusion vulnerability in Google Chrome's V8 engine allows remote attackers to exploit heap corruption via a crafted HTML page. This could impact organizations by enabling attackers to execute arbitrary code on affected systems, leading to data compromise or disruption. The risk is elevated as this vulnerabilit
CVE-2025-41715
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability affects web application databases that are exposed without authentication, allowing remote attackers unauthorized access and potential compromise. This could lead to unauthorized data retrieval, modification, or deletion. It is important to identify if any web applications use such exposed data