CVE-2026-20271: Cisco IOS XE Insufficient Control Flow Management
CVE-2026-20271 is a high-severity vulnerability in Cisco IOS XE Software with a CVSS score of 8.6. It is caused by insufficient control…
Tag: race condition
AI-Assisted Exploit Turns Linux Traffic-Control Race Condition Into Root Privilege Escalation
STAR Labs researcher Lee Jia Jie has published a Linux kernel exploit that leverages artificial intelligence to discover and weaponize a use-after-free…
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…
Ubuntu snap-confine Flaw CVE-2026-8933 Gives Local Users Root on Default Desktop Installs
Cybersecurity researchers have disclosed a high-severity local privilege escalation (LPE) vulnerability in snap-confine, tracked as CVE-2026-8933 (CVSS score: 7.8), that allows an…
CVE-2026-53410: TOCTOU Race Condition in Zoom Clients for Windows
CVE-2026-53410 is a high-severity time-of-check to time-of-use race condition vulnerability in the installation and uninstallation process of certain Zoom Clients for Windows…
New Bad Epoll Linux Kernel Flaw (CVE-2026-46242) Enables Root Privilege Escalation on Android and Linux Systems
A newly disclosed Linux kernel vulnerability, dubbed "Bad Epoll" and tracked as CVE-2026-46242, allows unprivileged local users to gain full root access…
CVE-2026-43074: Related Linux Kernel Epoll Flaw Found by Anthropic’s Mythos AI
A sibling vulnerability to Bad Epoll in the same epoll code area, discovered by Anthropic's Mythos AI model. Fixed earlier in 2026.…