Microsoft: October Windows update may break Smart App Control
Microsoft says Windows 11 update KB5127648 can gray out Smart App Control so it cannot be turned on.
3
Stories per day · 30 days
3 RSS
36 stories, newest first · one card per story
Stories tagged #security-update
Android’s October 2026 Updates Patch 25 Vulnerabilities
Google’s October 2026 Android update patches 25 flaws, including seven critical bugs, with no known exploitation.
Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940
Microsoft issued a revised September 2026 Exchange Server update (V2) adding a fix for CVE-2026-96940 across Exchange SE, 2019, and 2016.
3
Major rsync upgrade in Debian because of 33 CVEs
Debian bumps rsync to 3.5.0 on Trixie to fix 33 CVEs, with breaking security changes.
USN-8816-3: Linux kernel (Oracle) vulnerabilities
Ubuntu USN-8816-3 patches multiple Linux kernel vulnerabilities affecting Oracle cloud kernels across architectures, drivers and file systems.
USN-8851-1: Linux kernel vulnerabilities
Ubuntu USN-8851-1 patches three Linux kernel flaws in NFS server daemon, IPv6, and Netfilter that could allow system compromise.
USN-8842-1: Linux kernel (NVIDIA) vulnerabilities
Ubuntu patches 18 Linux kernel (NVIDIA) vulnerabilities across networking, InfiniBand, Netfilter, and TCM subsystems in USN-8842-1.
APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1
Apple patched a CoreGraphics flaw in iOS 26.7.1 and iPadOS 26.7.1 that may allow code execution via a crafted file.
USN-8793-1: Linux kernel (Azure CVM) vulnerabilities
Ubuntu patches nine Linux kernel vulnerabilities affecting Azure CVM environments across multiple subsystems.
USN-8761-3: Linux kernel (Azure) vulnerabilities
Ubuntu patches Linux kernel vulnerabilities affecting Azure VMs across ARM, GPU, network, and file system subsystems.
USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities
Ubuntu fixes CVE-2025-27558, a Linux WiFi mesh flaw caused by an incorrect CVE-2020-24588 fix, letting physically proximate attackers inject packets, plus other kernel updates.
USN-8725-2: Linux kernel (AWS) vulnerabilities
Ubuntu updates the AWS Linux kernel in USN-8725-2, fixing eight CVEs including issues in NFS, OCFS2, Netfilter, SCTP, and B.A.T.M.A.N. subsystems.
WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities
WordPress 7.1.1 fixes 11 core vulnerabilities including stored XSS, path traversal, and authorization bypass flaws; admins urged to update immediately.
3
USN-8779-2: Bubblewrap regression
Ubuntu issued USN-8779-2 reverting a Bubblewrap symlink fix for CVE-2026-87766 that caused a regression preventing some Flatpak apps from launching.
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Google's September Pixel update patches CVE-2026-58704, a high-severity cellular modem privilege escalation flaw showing signs of limited targeted exploitation.
USN-8772-1: AOM vulnerabilities
Ubuntu USN-8772-1 patches four libaom flaws (CVE-2026-56208 to CVE-2026-56211) that could cause heap overflow, arbitrary memory writes, or code execution.
Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones
Google shipped Chrome 153 fixing 42 vulnerabilities, including three Critical use-after-free and out-of-bounds bugs, with no active exploitation reported.
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.
USN-8761-1: Linux kernel (Azure) vulnerabilities
Ubuntu patches multiple Linux kernel (Azure) flaws across ARM64, Bluetooth, Netfilter, NTFS3, SMB and other subsystems.
USN-8760-1: Linux kernel (NVIDIA) vulnerabilities
Canonical issues USN-8760-1 patching multiple Linux kernel (NVIDIA) vulnerabilities across numerous subsystems and CPU architectures.
Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code
GitLab issues emergency patches for critical path-traversal flaw CVE-2026-85706 (CVSS 10.0), GraphQL credential exposure CVE-2026-87719, and potential RCE flaw CVE-2026-88765.
Forgejo 16.0.4 has a critical security bug fix (RCE - Remote Code Execution)
Forgejo 16.0.4 fixes a critical remote code execution vulnerability in the self-hosted Git forge; administrators should update promptly.
USN-8748-1: Linux kernel (NVIDIA) vulnerabilities
Ubuntu released USN-8748-1 patching multiple Linux kernel (NVIDIA) vulnerabilities across networking, file system, and crypto subsystems.
Update Chrome now to protect against an actively exploited vulnerability
Google shipped Chrome 153.0.8010.36/.37 fixing 230 flaws including actively exploited V8 out-of-bounds write CVE-2026-87491 enabling sandboxed code execution.
2