Aggregator

A vulnerability identified as critical has been detected in Insyde Kernel up to 5.5. This issue affects some unknown processing of the component UEFI Variable Handler. The manipulation of the argument the leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2022-35897. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as problematic has been discovered in OpenText BizManager up to 16.6.0.0. This vulnerability affects unknown code. The manipulation results in weak password recovery. This vulnerability is reported as CVE-2022-35898. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

India’s Ministry of Electronics and Information Technology (MeitY) has imposed a temporary ban on the Telegram messaging platform, restricting access nationwide until June 22, 2026. This decision is part of a comprehensive effort to combat organized cheating schemes that are targeting millions of students preparing to retake the National Eligibility cum Entrance Test (NEET UG […]

The post India Temporarily Bans Telegram Messenger Over Medical Exam Fraud appeared first on Cyber Security News.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.18.16/6.19.6/7.0-rc2. Impacted is an unknown function of the component net. Performing a manipulation results in race condition. This vulnerability is identified as CVE-2026-23302. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.6/7.0-rc2. The affected element is the function find_sdca_entity_iot of the component ASoC. Executing a manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2026-23301. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.0-rc2. This affects the function fib6_nh_init of the component net. Performing a manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-23300. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0-rc2. This vulnerability affects the function ucan_read_bulk_callback of the component ucan. Executing a manipulation of the argument length can lead to infinite loop. This vulnerability is handled as CVE-2026-23298. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 and classified as critical. Affected by this vulnerability is the function skb_queue_purge of the component Bluetooth. Executing a manipulation can lead to missing release of resource. This vulnerability is handled as CVE-2026-23299. The attack can only be done within the local network. There is not any exploit available. It is suggested to upgrade the affected component.

Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security experts warn the age checks are easy to circumvent and create new data-breach risks. [...]

Project Valhalla наконец входит в основную ветку OpenJDK.

A vulnerability marked as critical has been reported in Mozilla Firefox up to 151. The affected element is an unknown function. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-12314. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Mozilla Firefox up to 140.11. Impacted is an unknown function of the component Internationalization. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2026-12330. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Mozilla Firefox up to 140.11. This issue affects some unknown processing. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2026-12329. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Mozilla Firefox up to 151. This vulnerability affects unknown code of the component ImageLib. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2026-12325. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 151. It has been rated as critical. This affects an unknown part of the component CanvasWebGL. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2026-12324. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

GLP-1 减肥药如 Ozempic、Wegovy、Rybelsus 能快速降低体重，此前有担忧认为快速的体重下降可能导致骨质疏松，增加骨折风险。然而最新研究发现，相比其它起效较慢的减肥药，GLP-1 减肥药能将骨折风险降低 15%。研究人员承认需要更多研究去证实相关性。研究人员分析了逾 59,000 名患者，其中 26,324 名服用了 GLP-1 减肥药，对照组的 33,555 人服用的是非 GLP-1 减肥药。结果显示，实验组发生 794 例骨折，对照组则发生 1045 例。

A vulnerability was found in Mozilla Firefox up to 151. It has been declared as problematic. Affected by this issue is some unknown functionality of the component HTML. The manipulation results in improper restriction of rendered ui layers. This vulnerability was named CVE-2026-12323. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

A vulnerability was found in Mozilla Firefox up to 151. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Gtk. The manipulation leads to clickjacking. This vulnerability is uniquely identified as CVE-2026-12322. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Mozilla Firefox up to 151 and classified as problematic. Affected is an unknown function of the component Playback. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2026-12319. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.