Security update for lxd (critical)

openSUSE security update: security update for lxd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21788-1 Rating: critical References: bsc1223794 bsc1274936 bsc1274937 bsc1274954 bsc1274961 bsc1274963 bsc1275084 bsc1275085 bsc1275090 Cross-Reference...

CVE-2026-72980: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

PT-2026-88063

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-87723

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

PT-2026-87673

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

PT-2026-87976

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

thunderbird security update

140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR...

CVE-2026-83501: Out-of-bounds Read

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

thunderbird security update

140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

CVE-2026-18023: Sensitive Information in Resource Not Removed Before Reuse

Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refer to the ' Security Update for Armour...

PT-2026-88058

Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-88001

🚨 HIGH Severity: CVE-2026-78457 CVSS 7.0 Use-after-free flaw in Windows Security Health Service enables local privilege escalation by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/izz322NDMZ...

CVE-2026-69594: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-78457: Use After Free

Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77110: Improper Limitation of a Pathname to a Restricted Directory

Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...

ROS-20260908-73-0034

The vulnerability in Golang-X-Net is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

PT-2026-89117

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046

News, Security Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046 Share September 8th, 2026 Hi everyone! The latest patches to Opera’s browsers address several recent vulnerabilities, including a zero-day exploit CVE‑2026‑85046. We recommend updating your browsers to the latest...

APSB26-132 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability that could result in arbitrary code execution...