Aggregator

A vulnerability classified as critical has been found in Linux Kernel up to 7.0.12. The impacted element is the function ethosu_gem_cmdstream_copy_and_validate of the component accel. Performing a manipulation of the argument size results in out-of-bounds write. This vulnerability was named CVE-2026-53173. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 7.0.12. The affected element is the function feat_matrix_length of the component accel. Such manipulation of the argument Maximum leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-53172. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.12. Affected by this vulnerability is the function dma_length of the file ethosu_job.c of the component accel. Such manipulation of the argument stream leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-53171. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Samba. This vulnerability affects unknown code of the component Print Command Handler. Such manipulation leads to os command injection. This vulnerability is traded as CVE-2026-4480. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Samba and classified as problematic. This impacts an unknown function of the component WINS Service. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2026-3238. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Samba and classified as critical. The impacted element is an unknown function of the component samba-dcerpcd Service. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-4408. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as problematic has been found in Samba. This issue affects some unknown processing of the component Group Policy Handler. The manipulation leads to insufficient verification of data authenticity. This vulnerability is traded as CVE-2026-3012. Access to the local network is required for this attack to succeed. There is no exploit available.

Сообщество киберпреступников начало тестировать и распространять метод обхода ограничений Claude.

谷歌即将在其拥有超过十亿用户的产品列表中再添一个名字，该列表已包括搜索、云端硬盘、安卓、Gmail、YouTube和Chrome。谷歌公司在其2026年第二季度电话会议中表示，AI 助手Gemini现

An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s login screen, and moves on with her morning. She tells no one. That silence is the exposure. Across 13.9 million simulated phishing messages, one in ten recipients flagged the attempt to their security team. The rest let it through, and a live attacker needs only one of them. John Wilson, … More →

The post The best-funded companies open the most phishing attachments appeared first on Help Net Security.

A CVSS score 5.3 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'vmpr0be' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.1 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:L severity vulnerability discovered by 'vmpr0be' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Sajeeb Lohani' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Sajeeb Lohani' was reported to the affected vendor on: 2026-07-24, 4 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.3 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N severity vulnerability discovered by 'HAI SON MAI (HSon)' was reported to the affected vendor on: 2026-07-24, 11 days ago. The vendor is given until 2026-11-21 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A vulnerability classified as very critical has been found in Exim up to 4.99.4. This affects an unknown part. Performing a manipulation of the argument queue-name results in path traversal. This vulnerability is reported as CVE-2026-66140. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in OpenStack Zaqar up to 22.0.0. Affected by this issue is some unknown functionality. Such manipulation leads to improper authentication. This vulnerability is documented as CVE-2026-66139. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.