Aggregator

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.76/6.18.16/6.19.6/7.0-rc1. This affects the function __perf_event_overflow. Executing a manipulation can lead to race condition. The identification of this vulnerability is CVE-2026-23271. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.0-rc2. This affects the function local_addr_used of the file net/mptcp/pm_kernel.c of the component MPTCP Endpoint. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2026-23321. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.0-rc2 and classified as critical. This affects the function bpf_trampoline_link_cgroup_shim. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-23319. The attack needs to be done within the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.0-rc1. Affected by this issue is the function irdma_create_user_ah of the component irdma. Performing a manipulation results in memory leak. This vulnerability is cataloged as CVE-2026-23335. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.0-rc2. It has been classified as critical. This vulnerability affects the function qdisc_reset_all_tx_gt of the component net. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-23340. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Linux Kernel up to 7.0-rc2. This affects the function bpf_xdp_frags_increase_tail of the component xdp. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2026-23343. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.0-rc2. The impacted element is the function call_rcu of the component nft_set_pipapo. This manipulation causes denial of service. This vulnerability is tracked as CVE-2026-23351. The attack is only possible within the local network. No exploit exists. It is recommended to upgrade the affected component.

ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a fake system dialog, and when the victim cancels, installs two LaunchAgents and quietly exits. At the next login, Finder, the Dock, Spotlight, Terminal, Activity Monitor, and

ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a

Two leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months in prison each for hacking Transport for London (TfL) in 2024. [...]

Two-factor authentication is the least glamorous se

Деньги кончились — сервис встал. Деньги нашлись — сервис снова работает.

A vulnerability classified as critical has been found in Google Chrome. Impacted is an unknown function of the component Libyuv. This manipulation causes heap-based buffer overflow. This vulnerability is handled as CVE-2026-15767. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in Google Chrome. This affects an unknown function of the component V8. Executing a manipulation can lead to uninitialized pointer. The identification of this vulnerability is CVE-2026-15770. The attack may be launched remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in ImageMagick up to 7.1.2-25. Affected is an unknown function of the component JNG Encoder. Such manipulation leads to memory leak. This vulnerability is listed as CVE-2026-61866. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in Symfony up to 5.4.51/6.4.39/7.4.11/8.0.11. This affects the function parse_str of the component Runtime argv parsing. The manipulation of the argument env/no-debug leads to os command injection. This vulnerability is documented as CVE-2026-47767. The attack can be initiated remotely. There is not any exploit available.