Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The USN-8487-2 update addresses critical vulnerabilities in curl, particularly an incomplete fix for CVE-2026-8927 from the previous USN-8487-1. The vulnerabilities allow remote attackers to exploit connection reuse during STARTTLS upgrades and Negotiate-authenticated requests, potentially accessing...
A series of vulnerabilities in curl have been identified, affecting multiple versions of Ubuntu, including 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. The vulnerabilities allow remote attackers to exploit connection reuse and cookie parsing issues, potentially leading to unauth...
Microsoft's FORGE Lab reported the identification of 140 Windows vulnerabilities assigned CVEs between May and September 2026. Additionally, 155 validated reports were submitted across 23 open-source projects, with one Linux report leading to a patch merged into the kernel. The findings highlight a...