CVE-2026-41514: Observable Timing Discrepancy

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses...

Windows Defender (MsMpEng.exe) - Race Condition

Titles: Windows Defender MsMpEng.exe - Race Condition Author: nu11secur1ty Date: 2026-06-11 Vendor: Microsoft Corporation Software: Windows Defender Antivirus MsMpEng.exe Reference: https://gitlab.com/nu11secur1ty/0/-/raw/main/README.md?reftype=heads Description: A race condition exists between...

USN-8504-1 sogo vulnerabilities

It was discovered that SOGo did not properly sanitize categories used for events, tasks, and contacts. A remote authenticated attacker could possibly use this issue to perform cross-site scripting attacks. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...

CVE-2026-55993

creationtimestamp| type| source ---|---|--- 2026-07-05 20:49:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwh77eadh25 2026-07-06 12:51:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy4xvx6z62s 2026-07-09 03:56:59+00:00| seen|...

CVE-2026-56139

creationtimestamp| type| source ---|---|--- 2026-07-05 20:44:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o 2026-07-06 11:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26 2026-07-09 03:54:50+00:00| seen|...

CVE-2026-48205

creationtimestamp| type| source ---|---|--- 2026-07-05 20:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425 2026-07-06 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b 2026-07-09 08:07:07+00:00| seen|...

CVE-2026-49086

creationtimestamp| type| source ---|---|--- 2026-07-05 20:17:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwffn4twj2n 2026-07-20 15:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94308 2026-07-21 00:00:38+00:00| published-proof-of-concept|...

CVE-2026-43865

creationtimestamp| type| source ---|---|--- 2026-07-05 19:44:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwdlgokiu2l 2026-07-06 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116873273590366771 2026-07-06 13:30:31+00:00| seen|...

CVE-2026-14747

creationtimestamp| type| source ---|---|--- 2026-07-05 16:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvyykp26m2s...

CVE-2026-57985

creationtimestamp| type| source ---|---|--- 2026-07-05 16:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx5kkif527 2026-07-06 07:49:14+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:45+00:00|...

CVE-2026-14732

creationtimestamp| type| source ---|---|--- 2026-07-05 12:45:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvm6vlipk2i...

CVE-2026-53070

creationtimestamp| type| source ---|---|--- 2026-07-05 03:10:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpulzgq5ki2g 2026-07-06 06:48:07+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-10-01 18:00:00+00:00|...

Piercing Gilbreath'S Conjecture: From Deep Number Theory Insights to Fintech and Cybersecurity

I propose a new methodology to attack the fascinating Gilbreath's conjecture about prime numbers, first posted in 1878 and unsolved to this day. The problem statement is rudimentary: kids can understand it. However, despite decades of research, almost no progress has been made. This paper changes...

Malicious code in fmt-date-lite (npm)

The npm package fmt-date-lite is a supply-chain dropper disguised as a benign date-formatting utility its description reads "Lightweight date formatting utility with locale support". It ships six files, no source repository and no dependencies, with its real behaviour in an install script. A...

CVE-2024-1248

The silent Just-In-Time JIT provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provisioning process to overwrite existing roles of local users wi...

EUVD-2024-55648

The silent Just-In-Time JIT provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provisioning process to overwrite existing roles of local users wi...

CVE-2026-14626

creationtimestamp| type| source ---|---|--- 2026-07-04 20:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mptut6oxhh2o...

CVE-2026-53362

creationtimestamp| type| source ---|---|--- 2026-07-04 19:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpttsvlvec2a 2026-07-05 03:25:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumv3odqu2q 2026-07-06 06:53:36+00:00| seen|...

MAL-2026-6757 Malicious code in vps-maintenance-paperclip-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d7d517534385e3776097217c197836517e4f4d84ef29598724c4398bfc875e On import of the server entry module, a top-level try block detaches a shell process that 1 appends an attacker-controlled ssh-ed25519 public key to...

EUVD-2026-41674

A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sysioctl of the file components/lwp/lwpsyscall.c of the component Parameter Handler. Executing a manipulation can lead to divide by zero. The attack may be launched remotely. The exploit has been published and may...