Technology ❯ Software ❯ Software Security

Vulnerabilities

Remote Code Execution Amazon Linux Firefox Adobe Security Updates Denial of Service Microsoft Security Updates CVE Python Amazon Linux 2023 Thunderbird Adobe Applications Microsoft Critical Vulnerabilities ImageMagick Buffer Overflow libsoup Node.js Arbitrary Code Execution React Server Components Adobe Products Components Apache HTTP Server Browser Vulnerabilities ColdFusion FreeRDP Patch Management Flatpak Vulnerabilities Path Traversal CVE-2025-0725 undici CVE-2025-62409 Google Chrome Vulnerabilities Privilege Escalation CVE-2026-47302 libssh2 CVE Identifiers SAP Security Updates Redis CVE-2025-5419 Use-after-free Bug GnuTLS .NET macOS Vulnerability Exploitation Microsoft Security Flaws CVE-2026-33006 CVE-2025-55162 CVE-2026-47300 PHP Java Deployments GdkPixbuf Amazon Corretto Oracle Java SE CVEs Oracle GraalVM CVSS Scoring Apache Tomcat GNU Emacs Ghostscript Issue Correction CPython CVE-2024-25176 dnsmasq Web Application Firewall Magento Open Source Adobe Commerce LibTIFF Vulnerability Chrome Security Updates Mozilla Products Bootloader Exploits CVE References CVE-2025-54236 Patches CVE-2025-10528 Prompt Injection Cross-Site Scripting (XSS) CVE-2025-10527 libpng CVE-2025-10529 CVE-2025-10533 Rust Programming CVE-2025-10532 CVE-2026-50649 High Severity Vulnerabilities CVE-2024-11407 SAP Security Issues Visual Studio Code Extensions Remote Code Execution Vulnerabilities Authentication Bypass CVE-2026-38974 Security Updates CVE-2025-6075 Python Security Issues CVE-2025-50949 Adobe Vulnerabilities WhatsApp Security Advisories Microsoft Vulnerabilities PHP Security Information Disclosure Vulnerabilities MongoDB

Core Lightning Tells Operators to Upgrade or Go Offline After AI-Found Bugs

Maintainers plan to release signed binaries under a 14-day source-disclosure embargo to limit attacker reconnaissance.

GitLab Issues Emergency Patch for Critical Unauthenticated GraphQL Flaw

Browsers and Enterprise Software Receive Urgent Patches for Multiple Critical Flaws

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Widespread Flaws Let Prompt Injection Hijack AI Coding Tools and CI/CD Pipelines

Hundreds of Secrets Found in VS Code Extensions as Microsoft Blocks Leaky Uploads

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits

Adobe Issues Emergency Patch for 'SessionReaper' Magento Bug Allowing Account Takeovers

Zoom and Xerox Release Urgent Fixes for Critical Privilege and RCE Flaws