60
50
47
47
2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")
Linux kernel flaw CVE-2026-31431 ('Copy Fail', CVSS 7.8) allows unprivileged users to gain root via AF_ALG; a public PoC is out and most distros remain unpatched.
Disclosed on 29 April 2026, CVE-2026-31431 is a local privilege escalation in the Linux kernel's algif_aead module (AF_ALG crypto API), CVSS 7.8, stemming from a 2017 in-place optimisation. By chaining an AF_ALG socket operation with splice(), an unprivileged user can write 4 bytes into an arbitrary page-cache page, e.g. corrupting a setuid binary like /usr/bin/su to obtain a root shell. It affects virtually all kernels built since 2017, including Ubuntu 20.04-24.04, Amazon Linux 2023, RHEL 10.1, and SUSE 16; the mainline fix landed 1 April 2026 but no vendor packages were available as of 30 April. CERT-EU recommends the interim mitigation (disable algif_aead) and blocking AF_ALG via seccomp, prioritising Kubernetes nodes and CI/CD runners.
68
60
60
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero
60
50
60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More
60
60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
60
42
Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms
60
60
50
60
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
60
Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server
60
60
60
60
Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation
60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
60
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability
60
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
60
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero
60
Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
60
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
60
Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
60
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability
60
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws
60
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero
60
60
60