SAP Fixes Maximum-Severity “OVERPASS” Kernel Memory-Corruption Vulnerability
SAP patched max-severity OVERPASS kernel memory-corruption flaw on Sept 8, 2026. Learn impact, affected versions gap, and urgent patch steps.
Vulnerabilities
More news
Page 19 / 39 · 348 articles
Hard-Coded Bootloader Credential Exposes CareCam Pro Camera to Full Device Takeover
CVE-2026-85083: hard-coded bootloader credential in CareCam Pro ANJIA AJL33PC0801 lets attackers with physical access take full control.
Microsoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack
Microsoft fixed 966 flaws in record September Patch Tuesday, including two exploited Windows privilege-escalation zero-days leading to SYSTEM access.
WeChat Zero-Click Worm Hijacked Accounts Through Incoming Calls
A zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.
Microsoft Fixes 398 Vulnerabilities as Exploited Windows Kernel Flaw Enters CISA KEV
Microsoft patched 398 vulnerabilities, including exploited Windows kernel flaw CVE-2026-68820 now in CISA KEV. Patch immediately.
StyleSmuggler Zero-Day Gives Attackers Remote Control of Patched Magento Stores
StyleSmuggler zero-day enables unauthenticated RCE on patched Magento stores, deploying Rust backdoor via template injection. Learn risks and mitigation.
N-able Fixes Critical Pre-Auth RCE in N-central as Exploitation Reports Conflict
N-able fixes CVE-2026-86218, a CVSS 10.0 pre-auth RCE in N-central. Update to 2026.3.1.14 immediately amid conflicting exploitation reports.
Public Telerik RadAsyncUpload Exploit Chains Padding Oracle to Unauthenticated RCE
Public Telerik RadAsyncUpload exploit chains AES padding oracle to unauthenticated RCE. Learn affected versions, conditions, CVEs and fix in 2026.2.708.
G7 Calls for Faster Transition to Post-Quantum Cryptography
G7 and CISA urge immediate migration to post-quantum cryptography to counter harvest-now-decrypt-later threats to sensitive long-term data.