PT-2026-41286

Use-After-Free UAF vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-41246

An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability...

ROS-20260515-73-0048

A vulnerability in the Skia graphics library of Google Chrome browser is associated with a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...

PT-2026-41285

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS affected versions not specified Description A permission control issue exists in the web component. Successful exploitation of this flaw may affect the availability of the system. Recommendations At the moment, there is no...

AMD Processors 缓冲区错误漏洞

AMD Processors are a series of processors developed by American semiconductor company AMD. AMD Processors have a buffer error vulnerability, which stems from out-of-bounds reading. This vulnerability could allow attackers to access memory locations at will, resulting in loss of availability and...

PT-2026-41284

Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...

Vulnerability-Exploit-Correlation-Engine

Vulnerability-Exploit-Correlation-Engine Passive-analysis CLI...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2026-26062 Fleet server may terminate unexpectedly when handling certain gRPC requests

Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service DoS issue in the gRPC Launcher PublishLogs endpoint. In affected versions, certain unexpected input values were not handled gracefully, which could cause the Fleet server process to...

How Dangerous Is Anthropic’s Mythos AI?

Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not release it to the general public. Instead, it would only be available to a select group of companies to scan a...

Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.11

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.11 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.11 release that simplify the process of...

OPENSUSE-SU-2026:10780-1 perl-Net-CIDR-Lite-0.240.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Lite-0.240.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10781-1 perl-libwww-perl-6.830.0-1.1 on GA media

These are all security issues fixed in the perl-libwww-perl-6.830.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10777-1 ImageMagick-7.1.2.22-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10783-1 ucode-intel-20260512-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260512-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-40970

Summary Fleet contained a denial-of-service DoS issue in the gRPC Launcher PublishLogs endpoint. In affected versions, certain unexpected input values were not handled gracefully, which could cause the Fleet server process to terminate while processing an authenticated request from an enrolled...

OpenAI’s GPT-5.5 is as Good as Mythos at Finding Security Vulnerabilities

The UK's AI Security Institute evaluated GPT-5.5's ability to find security vulnerabilities, and found that it is comparable to Claude Mythos. Note that the OpenAI model is generally available. Here is the Institute's evaluation of Mythos. And here is an analysis of a smaller, cheaper model. It...

EUVD-2025-209815

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2026-8199

CVE-2026-8199 affects MongoDB Server before certain patched versions across multiple lines: v7.0 <7.0.34, v8.0 <8.0.23, v8.2 <8.2.9, and v8.3

OPENSUSE-SU-2026:10775-1 rsync-3.4.1-5.1 on GA media

These are all security issues fixed in the rsync-3.4.1-5.1 package on the GA media of openSUSE Tumbleweed...