Menu
View
Theme
Text size
The paper in your inbox every morning
Straight from the source · Glossary

The Tech Gazette

CVE

Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

Common Vulnerabilities and Exposures: the public catalogue that gives each known security flaw an id, like CVE-2024-3094.

Read more at cve.org →

In the news

  1. Palo Alto Networks Security AdvisoriesOct 17, 2026Security Desk
    CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
  2. oss-security (Openwall)Oct 16, 2026Security Desk
    Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
  3. Zscaler ThreatLabzOct 16, 2026Security Desk
    CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
  4. CISAOct 16, 2026Security Desk
    CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
  5. AlmaLinuxOct 16, 2026News
    PwnEscape (CVE-2026-99999): Patched kernels available in testing
  6. GitHub Advisories (PyPI)Oct 16, 2026Security Desk
    Critical: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
  7. GitHub Advisories (PyPI)Oct 16, 2026Security Desk
    Critical: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
  8. AWS Security BulletinsOct 16, 2026Security Desk
    CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
  9. AWS Security BulletinsOct 16, 2026Security Desk
    CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocols
  10. AWS Security BulletinsOct 16, 2026Security Desk
    Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
  11. AWS Security BulletinsOct 16, 2026Security Desk
    CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool
  12. AWS Security BulletinsOct 16, 2026Security Desk
    CVE-2026-18140 - Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
  13. Canadian Centre for Cyber SecurityOct 16, 2026Security Desk
    AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764
  14. oss-security (Openwall)Oct 16, 2026Security Desk
    CVE-2026-104715: cifs-utils 4.2-7.8 mount-option injection in mount.cifs
  15. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-105008 Windows Schannel Spoofing Vulnerability
  16. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability
  17. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability
  18. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
  19. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
  20. Microsoft Security Update GuideOct 16, 2026Security Desk
    CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability