TL;DR Google shipped a large Chrome security update on 30 June 2026. It fixes 382 security flaws across the desktop browser. Fifteen earn a critical rating. Google has not reported any exploitatio…

TL;DR Researchers have published full technical details and proof-of-concept exploit code for a Linux kernel vulnerability tracked as CVE-2024-26582 (CVSS 7.8). The bug is a use-after-free in the …

TL;DR Researchers have published full details and proof-of-concept code for GhostLock. This Linux kernel bug, tracked as CVE-2026-43499, hid in the code for over 15 years. It lets an unprivileged …

TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28 security flaws. Twenty of them can lead to arbitrary code execution when someone opens a cra…

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…

TL;DR Google shipped a Chrome security update that fixes 27 flaws across the desktop browser. Two are critical use-after-free bugs, one in Ozone and one in Views. The advisory reports no active ex…

TL;DR A researcher has published a full technical write-up and proof-of-concept exploit for a Linux kernel privilege escalation flaw. Tracked as CVE-2026-46215 (CVSS 7.8), it is a use-after-free i…

TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in the kernel. Each flaw lets an unprivileged local user aim for root, and two open …

TL;DR X.Org shipped fixes for two memory-safety flaws in the X.Org Server and Xwayland. The more severe one, CVE-2026-56000, is a use-after-free rated CVSS 9.0. The second, CVE-2026-55999, is a he…

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is tracked as CVE-2026-46242 and also reaches Android. Researcher Jaeyoung Chung has now published t…