Technology ❯ Software ❯ Software Security

Vulnerabilities

Remote Code Execution Adobe Security Updates Amazon Linux Firefox Microsoft Security Updates Python Amazon Linux 2023 Denial of Service CVE ImageMagick

GitLab Issues Emergency Patch for Critical Unauthenticated GraphQL Flaw

The out-of-schedule update shields self‑managed servers from a GraphQL directive that can modify or delete public projects.

Browsers and Enterprise Software Receive Urgent Patches for Multiple Critical Flaws

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

CISA Warns of Active Exploits as Microsoft Fixes 167 Security Flaws

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Widespread Flaws Let Prompt Injection Hijack AI Coding Tools and CI/CD Pipelines

Hundreds of Secrets Found in VS Code Extensions as Microsoft Blocks Leaky Uploads

Google Ships Chrome 140 Fixes for Critical ServiceWorker Bug and High-Risk Mojo Flaw

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits