ROS-20260821-73-0056

The vulnerabilities of the functions virtiommioreleasedev and virtiommioprobe in the drivers/virtio/virtiommio.c module related to the virtio chipset support in Linux operating systems are associated with operations involving resources after their expiration time. Exploiting these vulnerabilities...

ROS-20260821-73-0017

The vulnerabilities of the functions freeirqcpurmap, irqcpurmaprelease, and irqcpurmapadd in the lib/cpurmap.c module of the Linux operating system are related to the re-use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0004

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the use of a previously released resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0063

The vulnerability of the rdsrecvtracklatency function in the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers have shed light on an updated version of ToxicPanda aka TgToxic that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features...

ROS-20260818-73-0012

The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

About the security content of iOS 18.7.10 and iPadOS 18.7.10

About the security content of iOS 18.7.10 and iPadOS 18.7.10 This update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10. About Apple security updates For our...

WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud

A previously unseen Android near field communication NFC relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access trojan RAT called SpyNote as part of a contactless payment fraud scheme. The purpose-built malware, according to Group-IB, is designed to...

firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-61358

The CVE-2026-61358 entry concerns Windows Accessibility Infrastructure (ATBroker.exe) with an improper link resolution before file access (‘link following’) vulnerability that allows an authorized, local attacker to elevate privileges. Reported CVSSv3.1: 7.8 (HIGH) with Local access, Low attack c...

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-61358: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

PT-2026-70429

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description Improper link resolution before file access, also known as link following, in the Windows Accessibility Infrastructure ATBroker.exe allows an...

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate Android applications and execute complex multi-step tasks. To interpret user interfaces, these frameworks rely...

Effects of Parental Controls in the Context of Digital Forensics

Parental control systems are designed to protect minors online, but can inadvertently obstruct digital forensic investigations. When enabled, these systems restrict administrative privileges, disable debugging options, and alter data accessibility, complicating evidence acquisition and analysis...

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-14304

The CVE describes an XML External Entity (XXE) vulnerability in Eclipse ACTF up to version 1.6.0 (including ACTF-based miChecker up to 3.1.0). The underlying issue allows an attacker to access local or internal network resources via applications that use Eclipse ACTF (e.g., miChecker). Affected c...