Coverage tagged "Vulnerability".
arXiv:2610.36219v1 Announce Type: new Abstract: Cybersecurity education has predominantly focused on software and network security, under the assumption that the underlying hardware is trustworthy…
arXiv:2610.36334v1 Announce Type: new Abstract: AI-assisted vulnerability discovery can produce technically plausible findings faster than maintainers can validate, coordinate, and safely disclose…
arXiv:2610.36612v1 Announce Type: new Abstract: Hardware malware detectors (HMDs) classify hardware performance-counter measurements to identify malicious execution. Faults in their decision logic or…
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Posted by Alan Coopersmith on Oct 27 Forwarded Message Subject: [security] Vulnerabilities in golang.org/x/net Date: Tue, 27 Oct 2026 19:53:49 +0000 From: announce () golang org To: golang-nuts ()…
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot's DTLS networking was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot 3.2.2 through 4.7.2 and current…
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot 4.x multiplayer was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot 4.0.0 through 4.7.2 and current…
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the samtools package. These have all been fixed in a new release 1.25 and have also been pack-ported…
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the HTSlib package. These have all been fixed in a new release 1.25 and have also been pack-ported to…
Posted by Ricardo Branco on Oct 27 Hello, I am writing to share details regarding a seccomp filter bypass pattern affecting several projects (including containerd, Podman, systemd, and QEMU) that…
Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's…
Serial Number: AV26-1091 Date: October 27, 2026 As of October 27, 2026, Hitachi is affected by vulnerabilities in the following products: HiRDB Server Version 10 Multiple versions HiRDB Server…
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.
Serial number: AV26-1090 Date: October 27, 2026 As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product: Kantech Entrapass Prior to 9.20 The Cyber Centre…
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on…
Eight max-severity security defects could lead to remote code execution and authentication bypass.
