Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,611 stories synthesized.
Microsoft has patched a high-severity local privilege escalation vulnerability in the Windows cdd.dll driver that allows attackers with low-privileged code execution to gain SYSTEM privileges.
Microsoft has patched a local privilege escalation vulnerability in the Windows win32kfull driver, tracked as CVE-2026-24285, which allows an attacker with low-privileged code execution to gain SYSTEM-level access.
Trend Micro MDR analysis reveals KongTuke still uses compromised WordPress sites and fake CAPTCHA lures to deliver modeloRAT, leveraging legitimate Windows tools for stealth.
Trend Micro researchers have identified critical security weaknesses in OpenClaw, a viral sovereign agent framework, including insufficient input validation and potential for arbitrary code execution.
Huntress researchers uncovered a campaign where a threat actor exploited vulnerabilities in SolarWinds Web Help Desk and other enterprise software, then used a free trial of Elastic Cloud SIEM to store and triage stolen system data from over 200 hosts.
A breach at TriZetto Provider Solutions, a Cognizant subsidiary, has compromised the personal and health insurance information of over 3.4 million patients.
A critical path traversal vulnerability in Unraid's auth-request.php allows unauthenticated attackers to bypass authentication entirely, with a CVSS score of 7.3.
A critical path traversal vulnerability in Unraid (CVE-2026-3838) allows authenticated remote attackers to execute arbitrary code as root, with a CVSS score of 8.8.
Trend Micro researchers demonstrated document-based exploits against AI-driven KYC pipelines and introduced FENRIR, an automated system for discovering AI vulnerabilities at scale.
Iranian state-linked group MuddyWater is targeting US companies with a new backdoor called Dindoor, signed with a certificate issued to 'Amy Cherne' and leveraging the Deno runtime.
Google Threat Intelligence Group reports 90 zero-day vulnerabilities exploited in the wild in 2025, with 48% targeting enterprise software and appliances, marking a structural shift in the threat landscape.
A stack-based buffer overflow in GStreamer's H.266 codec parser, tracked as CVE-2026-3081, allows remote attackers to execute arbitrary code on affected systems.
A critical out-of-bounds write vulnerability in GStreamer's rtpqdm2depay element, tracked as CVE-2026-3083, allows remote attackers to execute arbitrary code via crafted X-QDM RTP payloads.
A critical integer underflow vulnerability in GStreamer's H.266 codec parser, tracked as CVE-2026-3084, allows remote attackers to execute arbitrary code by tricking users into processing a malicious file.
A critical heap-based buffer overflow in the Philips Hue Bridge's HomeKit implementation, disclosed at Pwn2Own, allows network-adjacent attackers to execute arbitrary code without authentication.
A critical out-of-bounds write vulnerability in GStreamer's H.266 codec parser (CVE-2026-3086) can be exploited for remote code execution, with a CVSS score of 7.8.
A heap-based buffer overflow in GStreamer's JPEG parser, tracked as CVE-2026-3082, allows remote code execution via crafted input and carries a CVSS score of 7.8.
A critical authentication bypass vulnerability in the Philips Hue Bridge, CVE-2026-3558, was disclosed after being demonstrated at Pwn2Own, allowing network-adjacent attackers to bypass security controls without authentication.
A heap-based buffer overflow in the Philips Hue Bridge's Zigbee stack, disclosed at Pwn2Own, lets network-adjacent attackers execute arbitrary code by tricking a user into pairing a malicious device.
A high-severity out-of-bounds write vulnerability in GStreamer's DVB subtitle handling, tracked as CVE-2026-2923, allows remote attackers to execute arbitrary code via specially crafted subtitle data.
A critical out-of-bounds write vulnerability in Delta Electronics CNCSoft-G2's DOPSoft module allows remote attackers to execute arbitrary code by tricking users into opening a malicious DPAX file.
ZDI discloses CVE-2026-2922, a critical out-of-bounds write vulnerability in GStreamer's RealMedia Demuxer that allows remote code execution via crafted video packets, with a CVSS score of 7.8.
A heap-based buffer overflow in the Philips Hue Bridge's HomeKit Pair-Setup functionality, disclosed at Pwn2Own, allows unauthenticated network-adjacent attackers to execute arbitrary code.
A critical heap-based buffer overflow vulnerability in GStreamer's rtpqdm2depay element, tracked as CVE-2026-3085, allows remote attackers to execute arbitrary code via specially crafted X-QDM RTP payloads.