Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
Pwn2Own Ireland 2026 paid $1,262,000 for 98 zero-days, including Galaxy S26, Pixel 10, and OpenAI Codex.
71
Organization
Viettel Cyber Security
- Mentions · 7d0
- Mentions · 30d0
- All mentions8
- First seenSep 22, 2026
- Last mentionedOct 9, 2026
Timeline
8 articles · newest firstSamsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Researchers collected $232,500 at Pwn2Own Ireland after 45 zero-days, including three Samsung Galaxy S26 hacks.
64
Pwn2Own Ireland 2026 - The Full Schedule
ZDI posted the Pwn2Own Ireland 2026 schedule, with over 60 entries including phones and AI targets.
55
Chrome Update Fixes 108 Vulnerabilities Including Critical GPU, WebGL and ANGLE Flaws
Chrome 154 patches 108 vulnerabilities, including critical memory-safety flaws in ANGLE, GPU, and WebGL that could enable code execution.
60
WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)
WordPress 7.1.2 fixes a critical unauthenticated path traversal flaw (CVE-2026-87902) that could allow remote code execution.
80
Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code
CVE-2026-65660 allows authenticated low-privilege users to execute arbitrary code on vulnerable on-premises Microsoft SharePoint servers via a SafeControls bypass.
78
Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges
Microsoft patched CVE-2026-65660, an authenticated SharePoint Server remote code execution flaw scored 8.8.
64
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Researchers show SharePoint CVE-2026-65660 enables authenticated RCE, despite Microsoft first listing it as spoofing.
68
Related CVEs
by mentions- CVE-2026-6566010%8.8Authenticated Code Injection RCE in Microsoft SharePoint Server
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- Heap buffer overflow in Chrome for Android ANGLE enables RCE
- Critical heap buffer overflow in Chrome ANGLE on Android
- CVE-2026-95350<1%9.6Heap buffer overflow in Google Chrome ANGLE on Android
- Out-of-bounds write in Chrome Android WebGL enables sandbox escape
- CVE-2026-95357<1%9.6GPU out-of-bounds write in Chrome for Android
- Use-After-Free Sandbox Escape in Google Chrome WindowDialog
- Use-after-free in Google Chrome Fullscreen enables sandbox escape
- GPU out-of-bounds write sandbox escape in Chrome on Android
Appears with
- Googlevendor · 5
- Microsoftvendor · 5
- Microsoftorganization · 4
- OpenAIvendor · 4
- Zero Day Initiativeorganization · 3
- Samsungvendor · 3
- Oraclevendor · 3
- Applevendor · 2
- Interrupt Labsorganization · 2
- Trellixorganization · 2
- Trellixvendor · 2
- GTG-1002threat actor · 2
- Ikotas Labsorganization · 2
- artists’ marketplacevictim · 2
- Kasperskyvendor · 2
- OpenAI Codexai model · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.