Posts of last 24 hours

CVE-2026-63803 | Linux Kernel up to 7.1.2 Hdlc Ppp detach_hdlc_protocol use after free (EUVD-2026-45469 / Nessus ID 327893)
A vulnerability has been found in Linux Kernel up to 7.1.2 and classified as very critical. The impacted element is the function detach_hdlc_protocol of the component Hdlc Ppp. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-63803. Remote exploitation of the attack is possible. No exploit is available.
https://vuldb.com/vuln/380146
CVE-2026-63833 | Linux Kernel up to 7.1.2 Ntfs3 setxattr LXUID/LXGID/LXMOD/LXDEV permission (Nessus ID 327894)
A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.2. This vulnerability affects the function setxattr of the component Ntfs3. Such manipulation of the argument LXUID/LXGID/LXMOD/LXDEV leads to permission issues. This vulnerability is traded as CVE-2026-63833. An attack has to be approached locally. There is no exploit available.
https://vuldb.com/vuln/380505
A forensic tool for backdoored code completions in AI assistants

Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick glance. Those tools learn from large collections of code, and some of that code can be tampered with before training starts. A poisoned example teaches a model to write insecure code when it sees a certain cue, and the flaw sits quietly until the right prompt … More →

The post A forensic tool for backdoored code completions in AI assistants appeared first on Help Net Security.

https://www.helpnetsecurity.com/2026/07/20/tracing-backdoored-code-completions/
Product showcase: ZoneAlarm Mobile Security adds customizable content filtering to mobile security

ZoneAlarm Mobile Security is a security app from Check Point designed to protect mobile devices against phishing, malicious websites, unsafe networks, and fraudulent links. It is available for iPhone, iPad, Android, and can run on Apple silicon Macs through the App Store. Getting started The onboarding process begins with a request for notification permissions, followed by instructions for enabling the Safari extension. Once enabled, the extension checks websites before they load to help protect browsing … More →

The post Product showcase: ZoneAlarm Mobile Security adds customizable content filtering to mobile security appeared first on Help Net Security.

https://www.helpnetsecurity.com/2026/07/20/product-showcase-zonealarm-mobile-security-adds-customizable-content-filtering-to-mobile-security/
CVE-2026-53170 | Linux Kernel up to 7.0.12 accel ethosu_job.c cmd_state_init sentinel uninitialized pointer (WID-SEC-2026-2077)
A vulnerability labeled as critical has been found in Linux Kernel up to 7.0.12. Impacted is the function cmd_state_init of the file ethosu_job.c of the component accel. Such manipulation of the argument sentinel leads to uninitialized pointer. This vulnerability is documented as CVE-2026-53170. The attack can be executed directly on the physical device. There is not any exploit available. The affected component should be upgraded.
https://vuldb.com/vuln/373797
CVE-2026-53169 | Linux Kernel up to 7.0.12 accel denial of service (Nessus ID 323535 / WID-SEC-2026-2077)
A vulnerability marked as critical has been reported in Linux Kernel up to 7.0.12. The impacted element is an unknown function of the component accel. This manipulation causes denial of service. The identification of this vulnerability is CVE-2026-53169. The attack needs to be done within the local network. There is no exploit available. It is suggested to upgrade the affected component.
https://vuldb.com/vuln/373700
CVE-2026-53167 | Linux Kernel up to 6.18.35/7.0.12 fuse uninitialized pointer (Nessus ID 325146 / WID-SEC-2026-2077)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.18.35/7.0.12. Impacted is an unknown function of the component fuse. The manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2026-53167. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.
https://vuldb.com/vuln/373698
CVE-2026-53165 | Linux Kernel up to 7.0.12 iomap iomap_finish_folio_read mapping buffer overflow (Nessus ID 323558 / WID-SEC-2026-2077)
A vulnerability labeled as critical has been found in Linux Kernel up to 7.0.12. This issue affects the function iomap_finish_folio_read of the component iomap. The manipulation of the argument mapping results in buffer overflow. This vulnerability is known as CVE-2026-53165. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.
https://vuldb.com/vuln/373741
CVE-2026-53166 | Linux Kernel up to 6.18.35/7.0.12 futex remove_waiter task null pointer dereference (Nessus ID 323592 / WID-SEC-2026-2077)
Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.
https://vuldb.com/vuln/373742
CVE-2026-53168 | Linux Kernel up to 7.0.12 fuse fuse_notify information disclosure (Nessus ID 323531 / WID-SEC-2026-2077)
A vulnerability labeled as critical has been found in Linux Kernel up to 7.0.12. The affected element is the function fuse_notify of the component fuse. The manipulation results in information disclosure. This vulnerability was named CVE-2026-53168. The attack needs to be approached within the local network. There is no available exploit. The affected component should be upgraded.
https://vuldb.com/vuln/373699

Managed ad