2026-10 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5128926)

2026-10 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 KB5128926...

July 14, 2026—KB5099444 (Monthly Rollup)

None None...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2026-48100: Acceptance of Extraneous Untrusted Data With Trusted Data

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-85880

creationtimestamp| type| source ---|---|--- 2026-09-08 17:25:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117236585017342705 2026-09-08 18:09:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzmkt3whi2t 2026-09-08 18:19:20+00:00| seen|...

CVE-2026-81963

creationtimestamp| type| source ---|---|--- 2026-09-08 17:25:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117236585017342705 2026-09-08 18:09:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzmkt3whi2t 2026-09-08 18:19:20+00:00| seen|...

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5126147)

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 KB5126147...

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5126148)

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5126148...

SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

CVE: This vulnerability corresponds to CVE-2026-72798. Summary renderAttributeView correctly applies the reader publish-access filter, but the filter's row-accessibility decision is keyed solely to the row's first cell, and it never inspects the remaining cells' values. Relation and Rollup cells...

Malicious Package

Overview cygnus-rollup-package-native is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview bellatrix-spica-rollup-forever is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

ROOT-APP-NPM-CVE-2026-27606 CVE-2026-27606 in rollup - Patched by Root

Root has patched CVE-2026-27606 in the rollup package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-47068 CVE-2024-47068 in rollup - Patched by Root

Root has patched CVE-2024-47068 in the rollup package for Root:npm. Multiple fixed versions available...

EUVD-2026-66385

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

CVE-2026-80346 StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

Malicious Package

Overview rollup-runtime-polyfill-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview rollup-packages-node-polyfills is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...