60
60
60
60
60
60
60
60
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
60
60
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
60
Google Warns of Pixel Firmware Security Flaw Exploited as Zero
60
60
60
60
60
60
Android 0-day Vulnerability on Google Pixel Devices Actively Exploited in Attacks
Google patched CVE-2026-58704, an actively exploited Android zero-day allowing proximal privilege escalation via the Pixel cellular modem, urging the 2026-09-05 patch.
Google confirmed CVE-2026-58704, a high-severity elevation-of-privilege flaw in the Pixel cellular modem, is being exploited in limited, targeted attacks and shipped emergency fixes in the September 2026 Pixel Update Bulletin. The low-complexity bug requires no user interaction and enables proximal/adjacent privilege escalation with no additional execution privileges, phrasing Google has historically used for spyware-vendor and state-aligned zero-days. The Pixel bulletin patches 110 flaws including 12 critical RCEs, while the broader September Android update addressed roughly 180 vulnerabilities, including Wi-Fi memory-corruption bug CVE-2026-28662.
82
VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks
AOMEI Backupper 8.4.0 driver flaw CVE-2026-12780 lets unprivileged users write physical disks and execute UEFI code, bypassing HVCI and EDR.
CERT/CC issued VU#687587 for CVE-2026-12780, an incorrect permission assignment (CWE-732) in the amwrtdrv.sys kernel driver shipped with AOMEI Backupper 8.4.0. The driver exposes a world-accessible device object without a security descriptor, allowing any unprivileged user to write arbitrary physical disk sectors; with Secure Boot disabled, an attacker can modify the GPT and inject a UEFI payload that executes before the OS loads, bypassing HVCI, EDR, Windows Defender and Hyper-V isolation. On TPM-only BitLocker configurations the attack can capture Volume Master Key material during pre-boot. AOMEI has shipped patches; users who cannot update should uninstall the software or disable the amwrtdrv.sys service, and enabling Secure Boot adds defense in depth.
62
Patch Tuesday, January 2026 Edition
60
Three Zero
60
September 2025 CVE Landscape
60
60
60
60
60
Google Patches New Android Kernel Vulnerability Exploited in the Wild
60
Google fixed an actively exploited zero
60
60
60
60
60
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero
60
Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit
60
60
60
60
60
60
60