3 casos · pág. 1/1
The Node.js Project released security updates on October 21, 2026 fixing 10 vulnerabilities (four high, three medium, three low severity) across the 26.x, 24.x and 22.x release lines. The most significant is CVE-2026-111497, an out-of-bounds write in the Brotli decoder that allows remote code execution in all three lines. The advisory giv…
Microsoft awarded researcher Sam Chen (Samchen) US$4,000 for reporting CVE-2026-81376, a critical (CVSS 3.1 score 9.6) Workspace Trust security feature bypass in Visual Studio Code versions before 1.136.2. A specially prepared workspace could connect to an attacker-controlled service and bypass Restricted Mode, potentially exposing local …
Researcher Quentin Kaiser (QTNKSR) disclosed a memory corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It allows an unauthenticated attacker within wireless range to disclose memory and execute code, including as root, on vulnerable routers. The attacker does not need the Wi-Fi password, network membership or a co…
