CVE-2026-7864

creationtimestamp| type| source ---|---|--- 2026-05-08 17:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlebzycadc2p...

CVE-2026-41524

creationtimestamp| type| source ---|---|--- 2026-05-08 17:44:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlebsllkdo2t 2026-05-08 18:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleebyjkhy2q...

CVE-2026-41690

creationtimestamp| type| source ---|---|--- 2026-05-08 17:29:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazdfstp2c 2026-05-08 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleepyw5wy2i...

CVE-2026-41683

creationtimestamp| type| source ---|---|--- 2026-05-08 17:22:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleam5ppcx2c 2026-05-08 19:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlegs6ixd72c...

CVE-2026-42072

creationtimestamp| type| source ---|---|--- 2026-05-08 17:22:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlealona2526 2026-05-08 18:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleem5x72k2v 2026-05-09 10:30:28+00:00| seen|...

CVE-2026-43344

creationtimestamp| type| source ---|---|--- 2026-05-08 17:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleadq6tbe2i...

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

CVE-2026-42353

creationtimestamp| type| source ---|---|--- 2026-05-08 17:07:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mle7qq5zuy2z 2026-05-08 18:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlee6ysikv2k...

CVE-2026-43348

creationtimestamp| type| source ---|---|--- 2026-05-08 17:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mle7dybt7j2p 2026-07-02 06:19:06+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-42793

creationtimestamp| type| source ---|---|--- 2026-05-08 16:15:00+00:00| published-proof-of-concept| https://github.com/absinthe-graphql/absinthe/security/advisories/GHSA-qf4g-9fqq-mmm7 2026-05-08 19:03:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlegaauzd22q...

CVE-2026-41886 locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled, requestInitialize, … without...

CVE-2026-41886 locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled, requestInitialize, … without...

CVE-2026-41886 locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled, requestInitialize, … without...

CVE-2026-41886

locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener"message", … handler that dispatches to registered internal handlers editKey, commitKey, commitKeys, isLocizeEnabled, requestInitialize, … without...

EUVD-2026-28564

In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipidsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b "clk: renesas: r9a07g044: Add MSTOP for RZ/G2L" we may get the following kernel panic, for some panels, when rebooting:...

UBUNTU-CVE-2026-43370

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm-processinfo assignment with cmpxchg to prevent race when parent/child processes sharing a drmfile both try to acquire the same VM after fork. cherry picked...

UBUNTU-CVE-2026-43469

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement rereceiving on the early exit paths In the event that rpcrdmapostrecvs fails to create a work request due to memory allocation failure, say or otherwise exits early, we should decrement ep-rereceiving before...

CVE-2026-44125

creationtimestamp| type| source ---|---|--- 2026-05-08 15:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldziac2jo2i...

CVE-2026-44500 ZEBRA: Allocation Amplification in Inbound Network Deserializers

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to zebra-chain version 7.0.0, and prior to zebra-network version 6.0.0, several inbound deserialization paths in Zebra allocated buffers sized against generic transport or block-size ceilings before the tighter...