171236 matches found
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...
CVE-2026-80917
In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...
Missing Authorization
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the PATCH /api/v1/hardware/id process. An attacker can reassign assets, bypass check-in procedures, and alter custody records by submitting the...
UBUNTU-CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding th...
CVE-2026-86765 Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...
Security update for python-pip
This update for python-pip fixes the following issue: Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4104-1 Security update for python-pip
This update for python-pip fixes the following issue: - Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599...
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...
September Microsoft Patch Tuesday
September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more than twice as many as in August. Seven products had 20 or more vulnerabilities fixed: Windows Biometric Service 64, Microsoft SQL Server 54, Windows DHCP Server 36, Microsoft Office Word 35, Windows NTFS 29,...
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...
ROOT-OS-DEBIAN-12-CVE-2025-38147 CVE-2025-38147 in linux - Patched by Root
Root has patched CVE-2025-38147 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-46728 CVE-2024-46728 in linux - Patched by Root
Root has patched CVE-2024-46728 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-40263 CVE-2025-40263 in linux - Patched by Root
Root has patched CVE-2025-40263 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-35951 CVE-2024-35951 in linux - Patched by Root
Root has patched CVE-2024-35951 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-68192 CVE-2025-68192 in linux - Patched by Root
Root has patched CVE-2025-68192 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-41013 CVE-2024-41013 in linux - Patched by Root
Root has patched CVE-2024-41013 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-26618 CVE-2024-26618 in linux - Patched by Root
Root has patched CVE-2024-26618 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-57872 CVE-2024-57872 in linux - Patched by Root
Root has patched CVE-2024-57872 in the linux package for Root:Debian:12. Multiple fixed versions available...