Posts of last 24 hours

CVE-2021-41356 | Microsoft Windows up to Server 2022 denial of service
A vulnerability described as critical has been identified in Microsoft Windows. The impacted element is an unknown function. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2021-41356. It is possible to launch the attack remotely. No exploit is available. It is advisable to implement a patch to correct this issue.
https://vuldb.com/vuln/186381
Google Chrome 151 Chromoting Flaw Allows Attackers to Execute Malicious Code Remotely

Google has released Chrome 151 Stable, fixing seven security vulnerabilities, including a critical use-after-free flaw in Chromoting that could potentially allow remote code execution. The update is rolling out as version 151.0.7922.173/.174 for Windows and macOS, and version 151.0.7922.173 for Linux. The most severe issue is tracked as CVE-2026-76017 and affects Chromoting, the technology used […]

The post Google Chrome 151 Chromoting Flaw Allows Attackers to Execute Malicious Code Remotely appeared first on Cyber Security News.

https://cybersecuritynews.com/google-chrome-151-chromoting-flaw/
China-Linked Spy Campaign Uses Five New Malware Families Against Central Asian Governments

Central Asian government bodies have been targeted in a cyberespionage operation using a compact but varied set of remote access tools. The activity, tracked as SilkParasite, relied on convincing government-themed documents and trusted Windows programs to quietly place malware on victims’ systems. The campaign appears designed for intelligence collection rather than widespread disruption. Its operators […]

The post China-Linked Spy Campaign Uses Five New Malware Families Against Central Asian Governments appeared first on Cyber Security News.

https://cybersecuritynews.com/china-linked-spy-campaign/
CVE-2026-63794 | Linux Kernel up to 7.1.2 Kvm Svm sev_dbg_crypt len use after free (Nessus ID 330014 / WID-SEC-2026-2403)
A vulnerability was found in Linux Kernel up to 7.1.2. It has been declared as very critical. The impacted element is the function sev_dbg_crypt of the component Kvm Svm. Executing a manipulation of the argument len can lead to use after free. The identification of this vulnerability is CVE-2026-63794. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/380135
CVE-2026-63795 | Linux Kernel up to 7.1.2 9p Client p9_client_walk clone use after free (Nessus ID 330014 / WID-SEC-2026-2403)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.1.176/6.6.143/6.12.94/6.18.37/7.1.2. Affected by this vulnerability is the function p9_client_walk of the component 9p Client. Such manipulation of the argument clone leads to use after free. This vulnerability is listed as CVE-2026-63795. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
https://vuldb.com/vuln/380139
A $25 template helped scammers build hundreds of phantom bank domains

A phrase on a suspicious website turned into an investigation of phantom banks built to support scams, according to new research from Allure Security. Molly DeQuattro, the company’s VP of Operations, was reviewing a domain that resembled the brand of one of its financial services clients. The page carried none of that client’s branding. It presented an unrelated bank instead. One phrase caught her attention: “one of the largest digital banking providers.” She searched public … More →

The post A $25 template helped scammers build hundreds of phantom bank domains appeared first on Help Net Security.

https://www.helpnetsecurity.com/2026/08/21/phantom-bank-websites-fraud-research/
CVE-2026-63793 | Linux Kernel up to 7.1.2/7.2 NTFS copy_to_user volume_label use after free (WID-SEC-2026-2403)
A vulnerability identified as critical has been detected in Linux Kernel up to 7.1.2/7.2. Affected is the function copy_to_user of the component NTFS. This manipulation of the argument volume_label causes use after free. This vulnerability is tracked as CVE-2026-63793. The attack is restricted to local execution. No exploit exists. You should upgrade the affected component.
https://vuldb.com/vuln/380138
CVE-2026-53403 | Linux Kernel up to 7.1.2 Fbdev fb_new_modelist var null pointer dereference (Nessus ID 330014 / WID-SEC-2026-2403)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.1.2. This impacts the function fb_new_modelist of the component Fbdev. The manipulation of the argument var results in null pointer dereference. This vulnerability is identified as CVE-2026-53403. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/380137
CVE-2026-53402 | Linux Kernel up to 6.12.95/6.18.38/7.1.2/7.2 Fbcon drivers/video/fbcon.c fbcon_do_set_font vc_hi_font_mask out-of-bounds (Nessus ID 327892 / WID-SEC-2026-2403)
A vulnerability was found in Linux Kernel up to 6.12.95/6.18.38/7.1.2/7.2 and classified as problematic. Impacted is the function fbcon_do_set_font of the file drivers/video/fbcon.c of the component Fbcon. Such manipulation of the argument vc_hi_font_mask leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-53402. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.
https://vuldb.com/vuln/380133
CVE-2026-53400 | Linux Kernel up to 6.12.94/6.18.37/7.1.2 I2C Core i2c_get_adapter use after free (WID-SEC-2026-2403)
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.94/6.18.37/7.1.2. This vulnerability affects the function i2c_get_adapter of the component I2C Core. The manipulation results in use after free. This vulnerability is known as CVE-2026-53400. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.
https://vuldb.com/vuln/380131

Managed ad