Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,611 stories synthesized.
A heap-based buffer overflow in the Philips Hue Bridge's hap_pair_verify_handler function, disclosed via Pwn2Own, allows network-adjacent attackers to bypass authentication and execute arbitrary code as root.
A heap-based buffer overflow in GStreamer's ASF demuxer, tracked as CVE-2026-2920, allows remote code execution when users open specially crafted ASF files, with a CVSS score of 7.8.
A newly disclosed integer overflow vulnerability in GStreamer's handling of palette data in AVI files allows remote attackers to execute arbitrary code on affected systems.
A vulnerability in the Philips Hue Bridge (CVE-2026-3562, CVSS 6.3) allows network-adjacent attackers to bypass authentication and execute arbitrary code via improper Ed25519 signature verification.
A local privilege escalation vulnerability in Docker Desktop's plugins directory handling, tracked as CVE-2025-15558, allows attackers with low-privileged code execution to gain elevated access; Docker has released a fix.
A heap-based buffer overflow in the Philips Hue Bridge (CVE-2026-3561) allows network-adjacent attackers to execute arbitrary code, with authentication bypass possible; the flaw was demonstrated at Pwn2Own and patched in firmware version 1975170000.
A static nonce vulnerability in the Philips Hue Bridge's HomeKit Accessory Protocol allows network-adjacent attackers to bypass SRP authentication without credentials, a flaw demonstrated at Pwn2Own.
Trend Micro researchers detail the BoryptGrab stealer campaign, which uses SEO-poisoned GitHub repositories and fake download pages to deliver a data-stealing malware family with a reverse SSH backdoor to Windows users.
Law enforcement and industry partners seized over 300 domains tied to Tycoon 2FA, a major phishing-as-a-service platform that bypassed multi-factor authentication using adversary-in-the-middle proxying.
A critical pre-authentication remote code execution vulnerability in Juniper's Junos OS Evolved, CVE-2026-21902, allows unauthenticated attackers to take full control of PTX Series routers.
A critical unauthenticated remote code execution vulnerability in Music Assistant, CVE-2026-26975, was disclosed by ZDI after being demonstrated at Pwn2Own, allowing network-adjacent attackers to execute arbitrary code as root.
A local privilege escalation vulnerability in Trend Micro Apex One Security Agent's iCore service (CVE-2025-71214, CVSS 7.8) allows attackers with low-privileged code execution to gain root access.
A critical directory traversal vulnerability in Trend Micro Apex One, tracked as CVE-2025-71210 with a CVSS score of 9.8, allows unauthenticated remote attackers to execute arbitrary code on the console.
A high-severity denial-of-service vulnerability in Docker Desktop for Mac's Model Runner component allows local attackers with low-privileged guest code execution to crash the host system.
A time-of-check time-of-use vulnerability in Trend Micro Apex One's iCore service lets attackers with low-privileged code execution escalate to root, with a CVSS score of 7.8.
A local privilege escalation vulnerability in Trend Micro Apex One Security Agent's cache mechanism allows attackers with low-privileged code execution to gain root access, with a patch now available.
A local privilege escalation vulnerability in Trend Micro Apex One's Virus Scan Engine allows attackers with low-privileged code execution to gain full SYSTEM access via a symbolic link attack on the VSApiNt.sys driver.
A high-severity vulnerability in Trend Micro Apex Central's management console allows authenticated attackers to escalate privileges, with a patch now available.
A critical authentication bypass vulnerability in Hewlett Packard Enterprise AutoPass License Server (CVE-2026-23600) allows remote attackers to gain unauthorized access without credentials.
A server-side request forgery vulnerability in Trend Micro Apex Central's Scheduled Update feature could allow authenticated attackers to probe internal networks.
A link-following vulnerability in Trend Micro Cleaner One Pro (CVE-2025-71218) allows local attackers to create a denial-of-service condition via a symbolic link attack.
Trend Micro has released a security update to fix a server-side request forgery vulnerability in Apex Central's Manual Update feature that could allow authenticated attackers to access internal network resources.
Trend Micro has released a patch for CVE-2025-71217, a local privilege escalation vulnerability in the Apex One Security Agent's TmSelfProtect component that allows low-privileged attackers to gain root access.
Trend Micro has released a patch for a server-side request forgery vulnerability in Apex Central Hub Server that could allow authenticated attackers to access internal network resources.