CVE-2026-18414

The ADI MAX32 ADC driver contains an out-of-bounds write vulnerability due to incorrect buffer size validation in drivers/adc/adc_max32.c. The start_read() function fails to account for sizeof(uint16_t) when comparing the buffer size against the sample count, allowing buffers that are half the re...

PT-2026-77335

The Zephyr kernel validates the k thread join and k thread abort system calls declared syscall in include/zephyr/kernel.h through thread obj validate in kernel/thread.c. Its default switch branch is the access-denied path, taken when k object validate returns -EPERM the calling user thread was...

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions

A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response EDR systems. SafeBreach researcher Alon Leviev said the methods are "capable of working across all...