24h | 7d | 30d

CVE-2026-94084

Overview

  • OISF
  • Suricata
20 Sep 2026
Published
20 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.4)
EPSS
0.40%
KEV

Description

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

RE: infosec.exchange/@suricata/117

nvd.nist.gov/vuln/detail/cve-2

sev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

nvd.nist.gov/vuln/detail/cve-2

sev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • 0
  • 2
  • 0
  • 9h ago

CVE-2026-94083

Overview

  • OISF
  • Suricata
20 Sep 2026
Published
20 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.4)
EPSS
0.40%
KEV

Description

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request with an HTTP1 to HTTP2 upgrade). This requires app-layer.protocols.doh2 to be enabled, which is the default in 8.x versions.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

RE: infosec.exchange/@suricata/117

nvd.nist.gov/vuln/detail/cve-2

sev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

nvd.nist.gov/vuln/detail/cve-2

sev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • 0
  • 2
  • 0
  • 9h ago

CVE-2026-77179

Overview

  • Docker
  • Docker Sandboxes
15 Sep 2026
Published
15 Sep 2026
Updated
CVSS v4.0
CRITICAL (9.4)
EPSS
0.16%
KEV

Description

On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.

Statistics

  • 1 Post
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Chris Short @ChrisShort

Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish docs.docker.com/security/secur

  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-79994

Overview

  • Docker
  • Docker Sandboxes
15 Sep 2026
Published
16 Sep 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
0.11%
KEV

Description

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

Statistics

  • 1 Post
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Chris Short @ChrisShort

Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish docs.docker.com/security/secur

  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-85880

Overview

  • Microsoft
  • Windows 10 Version 1607
08 Sep 2026
Published
21 Sep 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
0.57%
KEV

Description

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Statistics

  • 1 Post
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Volexity :verified: @volexity

Following @volexity’s September 9 blog post on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity discovered another threat actor, UTA0565, had been using the same exploits on Sept 3-4, 2026, while they were still unpatched.
 
UTA0565 used multiple fake websites, posing as media organizations and an NGO, to run a more customized version of the exploit framework than previously documented instances. The payload delivered was a new custom malware family, CLEANGULP, obfuscated using control flow flattening.
 
Full details and IOCs can be found here: volexity.com/blog/2026/09/21/m
 

  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-87491

Overview

  • Google
  • Chrome
09 Sep 2026
Published
21 Sep 2026
Updated
CVSS
Pending
EPSS
1.00%
KEV

Description

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Statistics

  • 1 Post
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Volexity :verified: @volexity

Following @volexity’s September 9 blog post on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity discovered another threat actor, UTA0565, had been using the same exploits on Sept 3-4, 2026, while they were still unpatched.
 
UTA0565 used multiple fake websites, posing as media organizations and an NGO, to run a more customized version of the exploit framework than previously documented instances. The payload delivered was a new custom malware family, CLEANGULP, obfuscated using control flow flattening.
 
Full details and IOCs can be found here: volexity.com/blog/2026/09/21/m
 

  • 0
  • 0
  • 0
  • 1h ago

CVE-2025-39682

Overview

  • Linux
  • Linux
05 Sep 2025
Published
19 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
1.20%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we break out of the main processing loop. If the record has already been decrypted (which may be the case for TLS 1.3 where we don't know type until decryption) we queue the pending record to the rx_list. Next recvmsg() will pick it up from there. Queuing the skb to rx_list after zero-copy decrypt is not possible, since in that case we decrypted directly to the user space buffer, and we don't have an skb to queue (darg.skb points to the ciphertext skb for access to metadata like length). Only data records are allowed zero-copy, and we break the processing loop after each non-data record. So we should never zero-copy and then find out that the record type has changed. The corner case we missed is when the initial record comes from rx_list, and it's zero length.

Statistics

  • 1 Post
Last activity: 11 hours ago

Bluesky

Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
CISA added 3 exploited Linux kernel flaws to its KEV catalog: CVE-2025-39682, CVE-2025-39964, and CVE-2026-53266. Risks include DoS, memory disclosure, crashes, and corruption. #LinuxKernel #CISA #CVEs
  • 0
  • 0
  • 0
  • 11h ago

CVE-2026-85046

Overview

  • Google
  • Chrome
03 Sep 2026
Published
21 Sep 2026
Updated
CVSS
Pending
EPSS
1.46%
KEV

Description

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Statistics

  • 1 Post
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Volexity :verified: @volexity

Following @volexity’s September 9 blog post on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity discovered another threat actor, UTA0565, had been using the same exploits on Sept 3-4, 2026, while they were still unpatched.
 
UTA0565 used multiple fake websites, posing as media organizations and an NGO, to run a more customized version of the exploit framework than previously documented instances. The payload delivered was a new custom malware family, CLEANGULP, obfuscated using control flow flattening.
 
Full details and IOCs can be found here: volexity.com/blog/2026/09/21/m
 

  • 0
  • 0
  • 0
  • 1h ago
Showing 41 to 48 of 48 CVEs