Technology ❯ Software ❯ Security
Remote Code Execution Denial of Service Microsoft Patches CVE Amazon Linux WebKit Patch Management Buffer Overflow Zero-Day Vulnerabilities Security Patches Exploits Advisories Updates Python Microsoft Office Rust FreeRDP ImageMagick Patch Tuesday Cryptography WebKit Issues Windows Security Libpng Denial-of-Service GnuTLS Privilege Escalation Kernel Vulnerabilities Security Fixes Oracle OpenEXR Zero-Day Exploits Patching AI in Security Malware Kernel Issues Apple Security CVE-2025-43300 Zero-day Vulnerabilities Firefox Android Security Bulletin Microsoft Patch Tuesday Curl Exiv2 CVE-2025-21204 libssh Apple Security Updates Bug Fixes GraalVM WebKit Vulnerabilities Command Injection Android Heap Buffer Overflow Emergency Updates iOS Security Microsoft Security Updates NVIDIA CUDA Toolkit OS Command Injection Unity Apache Tomcat iOS Updates Security Updates CVE-2025-50173 Oracle Java SE Secure Boot CVE Identifiers libxml2 Perl-YAML-Syck LibTIFF Perl Azure Font Parser Software Bugs Python Libraries CVE-2025-8194 Cross-Site Request Forgery (CSRF) Android SDK CVE-2025-61728 Critical Security Issues ANSI Escape Sequences Zero-Day Attacks CVE Reports CVE-2026-26130 CVE-2024-44239 Encryption Rclone CVE-2024-4671 SQL Injection Rsync Authorization Issues CVE-2026-40393 CVE-2026-22772 libpng CVE-2026-44471 CVE-2025-50181 CVE-2026-42502 CVE-2026-42311 JavaScriptCore CVE-2025-23255 Zcash
Researchers warn the zero-click prompt-injection pattern can still let an agent run arbitrary commands unless tooling separates proposed changes from an external apply step.
