What changed in exploited vulnerabilities this week

Every Sunday we compile the week just ended from the NVD, the CISA Known Exploited Vulnerabilities catalogue and public advisory feeds: new KEV entries, the critical CVEs to look at first, the vendors that kept coming up and the advisories worth reading. An analyst reviews each issue; every count comes from the feeds, and every outside headline links to its publisher.