This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...
Cybersecurity researchers at Google’s Mandiant Threat Defense have uncovered active exploitation of an unauthenticated access ...
Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud ...
QNAP patched two dozen vulnerabilities across its product portfolio, including 7 flaws demonstrated at Pwn2Own Ireland 2025.
Critical58Important0Moderate0LowMicrosoft addresses 63 CVEs including one zero-day vulnerability which was exploited in the ...
Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...
Cisco announced patches for nearly a dozen vulnerabilities, including two critical flaws leading to remote code execution.
Security teams may have a less burdensome rollout in November after October's Goliath Patch Tuesday, but shouldn't wait on ...
Security researchers SecurityBridge, who notified SAP after finding the flaw, described as a “missing input sanitation” ...
The zero-day vulnerability that has been listed as exploited in Tuesday's update is CVE-2025-62215 (CVSS score: 7.0), a ...
The Indian Computer Emergency Response Team (CERT-In) has warned of a high-severity remote code execution vulnerability in Google Chrome, urging users to update immediately.