Do Son NVIDIA patched 20 NemoClaw and OpenShell flaws. The worst, CVE-2026-65093 (CVSS 9.9), enables code execution via sandbox escape. Update now.
Code Execution
CVE-2026-17106 (CVSS 7.1) is the Docker CopyEscape vulnerability, letting malicious containers overwrite host files and trigger code execution.
NVIDIA warns of a critical 9.8 CVSS NVIDIA Dynamo flaw (CVE-2026-24254) leading to code execution. Update to the latest version to secure your systems.
NVIDIA BlueField has a critical VIRTIO-Net flaw, CVE-2026-65094, rated CVSS 9.0. A VM user could trigger code execution. Update to the fixed DOCA build.
F5 patched the NGINX code execution flaw CVE-2026-42533, along with CVE-2026-60005 and CVE-2026-56434. Update NGINX Plus and Open Source builds now.
PostgreSQL releases updates for versions 14-18 fixing 11 vulnerabilities (CVSS 8.8). Plus, critical End-of-Life deadline issued for Postgres 14.
NVIDIA patches high-severity flaws (CVE-2025-33217) in GPU drivers & vGPU software. Flaws allow code execution. Update Windows/Linux drivers now.
NVIDIA patches 4 high-severity flaws in CUDA Toolkit (up to v13.1). Vulnerabilities in Nsight Systems allow code execution & privilege escalation. Update now.
TeamViewer patches high-severity flaws in its DEX line, including CVE-2025-44016, which allows attackers to bypass file integrity and execute code.
A flaw in the Unity Runtime (CVE-2025-59489) allows local code execution in games via DLL injection through the Android intent handler. Developers must rebuild their apps.
Google promoted Chrome 141 to Stable, patching 21 flaws including a High-severity Heap Buffer Overflow (CVE-2025-11205) in WebGPU that could lead to RCE.
A critical SNMP flaw (CVE-2025-20352) in Cisco IOS/IOS XE is being actively exploited, allowing attackers root access. Urgent patching and mitigation required!
NVIDIA released critical security updates for GPU Display Drivers and vGPU software, patching 14 vulnerabilities that could lead to code execution, privilege escalation, or data leaks.
Synology BeeDrive desktop app for Windows has three high-severity vulnerabilities (CVSS 7.5-7.8) allowing local code execution and remote arbitrary file deletion.
CISA warns of critical flaws in Emerson ValveLink software, exposing cleartext data, allowing code execution, and compromising industrial systems. Update to v14.0 now.
Critical security vulnerability (CVE-2025-4318) in AWS Amplify Studio allows arbitrary code execution. Upgrade to version 2.20.3 immediately!
A WinZip vulnerability (CVE-2025-33028) allows attackers to bypass Mark-of-the-Web (MotW) protection, enabling silent code execution via malicious archives.
GitHub patches CVE-2025-3509 and more in Enterprise Server. Flaws allow code execution, XSS, and data exposure. Admins urged to update immediately.
Cloud Software Group addresses critical code execution and data function vulnerabilities (CVE-2025-3114, CVE-2025-3115) in Spotfire products. Upgrade to the latest version to mitigate risks.
Apache Airflow has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877)
According to SecurityWeek, on the first day of 2018, Siguza, a researcher specializing in the Apple operating system,...