● On the wire
Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//
Chrome/V8 zero-day attivamente sfruttato e inserito nel catalogo CISA KEV
Top story — Notizie

Chrome/V8 zero-day attivamente sfruttato e inserito nel catalogo CISA KEV

Google ha rilasciato un aggiornamento urgente per Chrome che corregge 12 vulnerabilità, tra cui CVE-2026-85046, un difetto di type confusion nel motore V8 già sfruttato in natura. La falla può permettere a un attaccante remoto di eseguire codice arbitrario nel sandbox del browser tramite una pagina HTML appositamente costruita. CISA ha aggiunto il bug al catalogo Known Exploited Vulnerabilities, confermando…

Read the article →
Sourcesecurityaffairs.com
From the newsroom