TL;DR A researcher published ShieldCrash, a Windows Defender 0day that bypasses Microsoft’s patch for the ShieldBreak vulnerability (CVE-2026-6941). Both the vulnerability details and proof-…

TL;DR A maximum-severity SQL injection flaw sits in the Android Contacts Provider. Tracked as CVE-2026-28576 with a CVSS score of 10, it lets a permission-less app read every contact. A public pro…

TL;DR A researcher disclosed four Linux kernel privilege escalation flaws on September 18, 2026. Each one can give a local user root on affected systems. The full technical details and proof-of-co…

TL;DR Security researchers revealed two severe D-Link DIR-822A vulnerabilities impacting wireless networking hardware. The flaws allow unauthenticated local attackers to trigger stack buffer overf…

TL;DR A researcher published cups2root, a working proof-of-concept that escalates a local lpadmin user to root on CUPS. The exploit chains several configuration and privilege-boundary flaws. No CV…

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to…

TL;DR A researcher published RustyTux, a working proof-of-concept for a Linux kernel privilege escalation flaw. It abuses an ESP-in-TCP use-after-free race in the strparser and espintcp code. Both…

TL;DR watchTowr has published a technical analysis and a public proof-of-concept for CVE-2026-88771, a Citrix NetScaler flaw already exploited in the wild as a zero-day. The pre-authentication com…

TL;DR Researcher Peter Malone has published full details and proof-of-concept code for CVE-2026-84543, a macOS SMB kernel vulnerability. A malicious SMB server can crash a Mac’s kernel when …

TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a macOS HFS+ vulnerability rated CVSS 9.8. A malformed disk image can m…