One page per week, never rewritten. Newest first.
Access control failures drive six of eleven exploited flaws this week
Forty-five items were reviewed between 9 and 16 September, and eleven of them have published exploitation. Five touch Microsoft 365, and none of those five have published exploitation. One publisher supplied 22 of the 45 items, so treat the shape of the week as partly a property of the source mix.