Automated cyber signal feeds.
CVE ID :CVE-2026-65706 Published : July 23, 2026, 7:05 p.m. | 54 minutes ago Description :FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted…
CVE ID :CVE-2026-65703 Published : July 23, 2026, 6:52 p.m. | 1 hour, 7 minutes ago Description :FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying…
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last 90 days of email, the organization’s entire email directory, the password saved in the browser and…
CVE ID :CVE-2026-22049 Published : July 22, 2026, 7:16 p.m. | 34 minutes ago Description :ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited…
CVE ID :CVE-2026-64835 Published : July 22, 2026, 6:17 p.m. | 1 hour, 33 minutes ago Description :FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec that allows attackers to trigger both out-of-bounds…
CVE ID :CVE-2026-64832 Published : July 22, 2026, 6:17 p.m. | 1 hour, 33 minutes ago Description :FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec that allows attackers to trigger memory corruption by…
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS…
CVE ID :CVE-2026-65013 Published : July 22, 2026, 5:16 p.m. | 2 hours, 34 minutes ago Description :Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users’ resources…
CVE ID :CVE-2026-64877 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database. Severity: 9.6…
CVE ID :CVE-2026-55082 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access…