Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Failure Record: MT6985 Adaptation Attempt...

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Source code for the Flying Eagle Android remote access trojan RAT framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public...

CVE-2026-8497: Improper Certificate Validation

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

Google Chrome < 151.0.7922.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 151.0.7922.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0887107924 advisory. - Use after free in Dawn. CVE-2026-18017 - Use after free in...

CVE-2026-62828

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...

CVE-2026-62828

CVE-2026-62828 describes improper input validation in Microsoft Edge for Android (Chromium-based) that allows an unauthorized attacker to tamper over a network. The affected component is the browser on Android; the root cause is input validation weakness leading to tampering. The available docume...

CVE-2026-62828

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-49870

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...

CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

...

CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

...

SUSE-SU-2026:22959-1 Security update for python313, python3

This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...

CVE-2026-16419

A flaw was found in Google Chrome's ANGLE component on Android. A remote attacker could exploit an out-of-bounds memory access vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to...

CVE-2026-16424

A flaw was found in Google Chrome on Android. A remote attacker, who has already compromised the browser's renderer process, could exploit a use-after-free vulnerability within the GPU component. This could allow the attacker to bypass the browser's security sandbox and execute unauthorized...

PT-2026-65516

Name of the Vulnerable Software and Affected Versions Microsoft Edge for Android affected versions not specified Description Improper input validation allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is no information about a newer version...

CVE-2026-62828: Improper Input Validation

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...

CVE-2026-16404

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox for Android...

CVE-2026-16397

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the WebExtensions component in Firefox for Android...

CVE-2026-16373

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Privacy component in Firefox for Android...

A week in security (July 20 &#8211; July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...

Privilege Escalation of Poly Devices on the Android Platform

A local attacker who can execute code on the device could potentially escalate privileges through the Android Runtime vulnerability. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential...