TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and the rest are medium or low. The updates cover the 26.x, 24.x, and 22.x release lines. No in-t…

TL;DR Google shipped a large Chrome security update on the Stable channel. It fixes 370 vulnerabilities, including seven rated critical. The new build is 151.0.7922.71/.72 for Windows and Mac, and…

TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free sits in the QPACK code of the HTTP/3 module. F5 fixed it in NGINX Open Sour…

The Debian project has published security advisory DSA-6405-1, delivering a new Linux kernel update for Debian 13. The update resolves a total of 68 kernel vulnerabilities. Their impact spans loca…

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and escalate to root. The flaw sits in the net/sched packet scheduler and comes from a use-a…

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it lets a guest break out to the host. The attacker can then run comm…

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

TL;DR Google shipped a new Chrome security update on the Stable channel. It fixes five high-severity use-after-free flaws across V8, Blink, HTML, TabStrip, and Extensions. No exploitation in the w…

TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the mariadbd process from a low-privilege database account. Both the technical details and pr…

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is a use-after-free in the Linux kernel RDMA/rxe driver. It started as a …

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control code. The flaw lets a local user escalate to root on affected sys…

TL;DR A Linux kernel vulnerability, tracked as CVE-2026-68162, affects the SCTP networking code. It rates CVSS 7.8. Researchers at NebuSec have published proof-of-concept exploit code that escalat…

TL;DR A critical Linux kernel vulnerability, tracked as CVE-2026-80714 (CVSS 9.8), affects the IPVS netfilter code. Researchers at NebuSec have published proof-of-concept exploit code plus a video…

Security team NebuSec published technical details and functional exploit code for a critical Linux flaw. This Linux CVE-2026-52924 flaw triggers a use-after-free memory state within the kernel net…

TL;DR A researcher published RustyTux, a working proof-of-concept for a Linux kernel privilege escalation flaw. It abuses an ESP-in-TCP use-after-free race in the strparser and espintcp code. Both…

TL;DR Google has promoted Chrome 155 to the Stable channel with 247 security fixes. The Chrome 155 security update patches four Critical use-after-free bugs and at least 53 High-severity flaws. Go…

TL;DR Google released Chrome 155.0.8059.79/.80 on October 13, 2026, with fixes for 37 security flaws. This Chrome security update includes seven critical bugs, led by a buffer overflow in the ANGL…

TL;DR Google released Chrome 155.0.8059.84/.85 on October 15, 2026, with fixes for 10 vulnerabilities. This Chrome security update patches one critical use after free bug in Prerender and six high…