CVE-2026-62429

A flaw was found in Xen. A race condition exists where a guest's virtual Non-Uniform Memory Access vNUMA configuration data can be accessed by a device model even after the guest's domain destruction has started. This occurs because the cleanup of the vNUMA configuration is not synchronized with...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

The risk hiding behind exposed MCP servers

How unauthenticated Model Context Protocol MCP servers are opening doors to sensitive cloud data, IAM, and command execution...

MINI-MF4X-5CRH-WWG2

Bulletin has no description...

CVE-2026-67174 DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities. The tryResolveHTMLElement function treated any resolved string as HTML markup by assigning it to a element through innerHTML. Strings derived from untrusted graph...

MINI-8M36-G48C-5P3V

Bulletin has no description...

MINI-PPCM-99FW-3HC5

Bulletin has no description...

MINI-759G-QXM7-33F4

Bulletin has no description...

MINI-M93P-36RX-XX83

Bulletin has no description...

MINI-2C2P-V24W-VFWH

Bulletin has no description...

MINI-VX4R-M997-JR49

Bulletin has no description...

ALPINE-CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62429

The CVE-2026-62429 vulnerability concerns Xen hypervisor: vNUMA domain cleanup can race with other operations, exposing a race between destroying a guest domain and retrieving its vNUMA configuration.What’s affected: Xen versions 4.5+ (4.4 and earlier not affected) for guests using vNUMA with dev...

CVE-2026-62429 vNUMA domain cleanup may race other operations

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62426

CVE-2026-62426 concerns sysctl and platform-op locking in Xen environments. The issue arises from system-wide locks used for operations in control domain or Xenstore domain, where lock acquisition lacks fairness. With XSM/Flask enabled, some lock acquisitions can occur before permission checks, c...

Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost

Microsoft has launched its first cybersecurity-specific model inside MDASH , its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its curre...

PT-2026-65607

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.59.0 through 0.61.0 Description When generating Python data models from an XML Schema using the --input-file-type xmlschema option, the software improperly resolves schemaLocation values within , , , and...

CVE-2026-64722

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a 3D model may result in disclosure of process memory...