Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Oracle has disclosed a critical security vulnerability in the ptrace functionality of its Linux kernels, identified as CVE-2026-46333. This vulnerability affects multiple versions of Oracle Linux, including Oracle Linux 8, 9, and the Unbreakable Enterprise Kernel (UEK). The flaw allows unauthorized...
On March 24, 2026, the Node.js project released version 20.20.2 ‘Iron’ as a critical security update for its Long-Term Support (LTS) branch. This update addresses seven vulnerabilities, including issues with TLS error handling, HTTP/2 flow control, cryptographic timing leaks, and permission model by...
A significant security update for Node.js 22 has been released, addressing multiple vulnerabilities affecting openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP6. The update includes fixes for CVE-2026-21717, which allows for performance degradation through predictable hash collisions, and CV...
A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and...