Secure Boot Bypass

The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

CVE-2026-28883

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packag...

Toward Securing AI Agents like Operating Systems

Autonomous agents based on large language models LLMs are rapidly emerging as a general-purpose technology, with recent systems such as OpenClaw extending their capabilities through broad tool use, third-party skills, and deeper integration into user environments. At the same time, these agentic...

operating systems Code Execution

The vulnerability of operating systems iPadOS, iOS, and macOS Tahoe is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Netlogon Service Code Execution

The vulnerability of the Netlogon service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Filtering Platform Bypass

The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

CVE-2026-28996

A race condition was addressed with additional validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data...

CVE-2026-28995

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox...

CVE-2026-28988

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An app may be able to bypass certain Privacy preferences...

Remote Desktop Services Privilege Escalation

The vulnerability of the Remote Desktop Services RDS service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Win32K GRFX Privilege Escalation

The vulnerability of the Win32K component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Link-Layer Discovery Protocol Privilege Escalation

The vulnerability of the Link-Layer Discovery Protocol LLDP implementation in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows TCP/IP DoS

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

Storport Miniport Driver DoS

The vulnerability of the Storport Miniport Driver for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Data Protection Software PowerProtect Data Domain Unauthenticated Access

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...

EUVD-2026-29819

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system...

EUVD-2026-29808

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

EUVD-2026-29751

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may...

EUVD-2026-29750

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may...

CVE-2026-28994

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to...