ThreatVectr

Vulnerabilities — Page 17

A smartphone displaying an active video call on its screen, while security analysis diagrams on a laptop behind it reveal the multi-stage exploit path to kernel
Vulnerabilities

A Video Call Can Now Hand Attackers the Keys to Your Android Phone

Researchers say a two-stage exploit against Unisoc modem chips turns a VoLTE video call into full kernel access, and there's no patch.

4 min read
Mac computer setup in an office with screen sharing remotely active, malware process running in the background detected by system logs, cryptocurrency mining st
Vulnerabilities

Dutch cyber agency warns of live attacks on macOS Screen Sharing flaw

Hackers are breaking into Mac computers exposed to the internet, seizing top-level control, and quietly mining Monero cryptocurrency.

4 min read
Database security monitoring dashboard displayed on a workstation showing risky configuration flags and unusual access patterns being detected across multiple d
Vulnerabilities

Oracle Releases Free Database Security Tool Amid Growing Pressure From AI-Powered Bug Hunters

Oracle Database Security Central gives organisations a single place to spot risky database settings and unusual access patterns. It's free until February 2027, though the window that prompted its creation is already closing.

3 min read
A security analyst's workstation displaying attack traffic logs and map software vulnerability alerts in real-time, network packets visible crossing between sys
Vulnerabilities

Hackers Are Already Probing a Dangerous, Unpatched Flaw in GeoServer

A newly public security hole in popular mapping software drew hundreds of attack attempts within hours. No fix exists yet.

3 min read
An industrial design workstation with 3D modelling software displaying a malformed CAD file causing a crash, error messages and system logs visible, security pa
Vulnerabilities

Siemens Patches High-Severity Flaw in Parasolid 3D Modelling Engine

A memory-handling bug in Siemens Parasolid, tracked as CVE-2026-64629, lets a booby-trapped design file crash the host application or run attacker code. Siemens has shipped fixed builds.

3 min read
An industrial control room with SCADA system displays showing pipeline and manufacturing equipment monitoring, a security alert panel highlighting a code execut
Vulnerabilities

AVEVA warns of code-execution flaw in Enterprise SCADA software used across pipelines and manufacturing

A high-severity deserialization bug lets an authenticated operator run code inside the industrial control system. AVEVA has shipped patches for every supported release.

4 min read
A corporate IT dashboard on multiple monitors showing enterprise device management software interface with highlighted security warning indicators and system co
Vulnerabilities

$58 Certificate, Four Flaws: Researchers Show How SCCM Can Hand Attackers the Keys to an Entire Company

A security research team chained four weaknesses in Microsoft's enterprise device-management software to reach full system control, starting with nothing more than a standard company login.

5 min read
A browser window open on a laptop showing a government login portal with security warning icons, surrounded by digital vulnerability indicators on the screen
Vulnerabilities

Millions of Belgians' IDs and bank accounts were wide open through a government browser extension

A browser extension used by more than 2 million Belgians to log into government and banking websites contained flaws so serious that criminals could have stolen identities, hijacked payment cards, and taken full control of victims' computers. The vendor fixed the problems on 22 July.

4 min read
A security operations center with multiple screens displaying firewall software interfaces, with red alert notifications and authentication bypass warnings high
Vulnerabilities

Fortinet Patches Eight Flaws, Including Two That Let Attackers Log In Without Real Credentials

Two high-severity bugs in Fortinet's security products could let criminals talk their way past login screens they should never be able to reach.

3 min read
An e-commerce store website displayed on a monitor with shopping cart and customer account pages, overlaid with security breach warning graphics and unauthorize
Vulnerabilities

Attackers are already probing a critical Adobe Commerce flaw that lets them hop into shoppers' accounts

CVE-2026-71362 needs no login, no admin rights and no victim clicks. Sansec says its firewall is already blocking live exploitation attempts despite Adobe seeing none.

3 min read
Illustration: A computer chip manufacturing facility with Intel and AMD processor units visible under specialized
Vulnerabilities

Intel and AMD Quietly Patched Over 80 Security Flaws. Here Is What That Means For You.

Two of the biggest names in computer chips fixed a pile of serious vulnerabilities this Patch Tuesday. Some could let attackers take full control of an affected machine.

3 min read
A server room with equipment racks, multiple screens displaying vulnerability scans and patch status dashboards, calendar or timeline showing urgent deadlines a
Vulnerabilities

Hackers Exploit Patched VMware vCenter Flaw as Regulators Watch Disclosure Clocks

A directory-traversal bug rated 9.8 out of 10 is under active attack, and SEC and EU disclosure duties now sit squarely on affected firms.

4 min read
An Ivanti Endpoint Manager dashboard on a monitor showing system administration controls, with security alerts and patch notifications displayed, network diagra
Vulnerabilities

Ivanti Patches Three High-Severity Flaws in Endpoint Manager That Attackers Could Hit Remotely

Two of the bugs needed no password to exploit. Ivanti says no customers were hit before the fixes landed.

3 min read
An industrial factory floor with manufacturing equipment and control systems visible, computer workstations running factory management software in the foregroun
Vulnerabilities

August 2026 ICS Patch Tuesday: Siemens, Schneider Electric and Phoenix Contact Fix Serious Flaws in Factory Equipment

A batch of August security updates covers industrial control systems that run factories, power networks and buildings. One Siemens flaw scores the maximum possible severity rating and lets attackers run any code they like on a connected device without needing a password.

3 min read
A security researcher's workspace showing code editor with proof-of-concept exploit displayed, Windows Defender interface running in background, security bypass
Vulnerabilities

Researcher publishes 'ShieldBreak' code that claims to defeat a recent Microsoft Defender fix

A proof-of-concept from a researcher known as Chaotic Eclipse says the patch for CVE-2026-50656 can still be bypassed to gain full control of Windows machines.

3 min read
© 2026 Threat Vectr