https://infosecledger.com/news/vulnerabilities/microsoft-patches-high-severity-hyper-v-flaw/InfoSec Ledgeren2026-10-14T23:31:31ZMicrosoft patches high-severity Hyper-V flaw allowing local code executionhttps://infosecledger.com/news/vulnerabilities/cvss-8-8-net-3-5-4-8-1-type-confusion-enables/InfoSec Ledgeren2026-10-14T23:31:31ZCVSS 8.8: .NET 3.5-4.8.1 Type Confusion Enables Remote Privilege Escalation via CVE-2026-102869https://infosecledger.com/news/vulnerabilities/4-net-versions-patched-wpf-deserialization-flaw/InfoSec Ledgeren2026-10-14T23:31:31Z4 .NET Versions Patched: WPF Deserialization Flaw Enables Network Code Executionhttps://infosecledger.com/news/vulnerabilities/250k-bounty-awarded-for-6-day-ai-assisted-chrome/InfoSec Ledgeren2026-10-14T23:31:31Z$250k Bounty Awarded for 6-Day AI-Assisted Chrome Zero-Day Chain Escaping Windows Sandboxhttps://infosecledger.com/news/vulnerabilities/cve-2026-101986-critical-j-web-auth-bypass-lets/InfoSec Ledgeren2026-10-14T23:24:07ZCVE-2026-101986: Critical J-Web Auth Bypass Lets Attackers Run Code on Junos OShttps://infosecledger.com/news/vulnerabilities/cvss-9-8-juniper-junos-bgp-buffer-overflow/InfoSec Ledgeren2026-10-14T23:24:07ZCVSS 9.8: Juniper Junos BGP Buffer Overflow Enables Peer Control When Threading Activehttps://infosecledger.com/news/vulnerabilities/9-3-cvss-whisper-node-v1-1-1-os-command-injection/InfoSec Ledgeren2026-10-14T17:30:18Z9.3 CVSS: Whisper-node v1.1.1 OS Command Injection Grants Node.js Privilegeshttps://infosecledger.com/news/vulnerabilities/9-3-cvss-video-stitch-2-0-0-beta-1-critical-shell/InfoSec Ledgeren2026-10-14T17:30:18Z9.3 CVSS: video-stitch <2.0.0-beta.1 Critical Shell Injection via Filenames in Node.js Appshttps://infosecledger.com/news/vulnerabilities/unauthenticated-rce-in-windows-dhcp-server/InfoSec Ledgeren2026-10-14T15:12:52ZUnauthenticated RCE in Windows DHCP Server Exposes Networks to Remote Attackshttps://infosecledger.com/news/ai/asml-boosts-2026-sales-forecast-to-44b-as-orders/InfoSec Ledgeren2026-10-14T12:11:24ZASML boosts 2026 sales forecast to €44B as orders stretch into 2030https://infosecledger.com/news/ai/6m-lines-refactored-gemini-4-argon-intro-rates/InfoSec Ledgeren2026-10-14T12:11:08Z6M lines refactored: Gemini 4 Argon intro rates expire Nov 30, prompting budget warningshttps://infosecledger.com/news/cyber-attacks/msps-lured-by-seo-poisoning-to-fake-watchguard/InfoSec Ledgeren2026-10-14T12:05:06ZMSPs Lured by SEO Poisoning to Fake WatchGuard Site That Stole Credentials Before Delivering Real VPN Clienthttps://infosecledger.com/news/vulnerabilities/cve-2026-110002-snazzy-social-media-feed-critical/InfoSec Ledgeren2026-10-14T04:02:36ZCVE-2026-110002: Snazzy Social Media Feed Critical Flaw Lets Auth Users Run Codehttps://infosecledger.com/news/vulnerabilities/10-8-0-abandoned-cart-pro-auto-login-flaw-enables/InfoSec Ledgeren2026-10-14T04:02:36Z10.8.0: Abandoned Cart Pro Auto-Login Flaw Enables Credential-Free Admin Account Hijackhttps://infosecledger.com/news/vulnerabilities/9-1-cvss-click-to-chat-for-whatsapp-v4-44-lets/InfoSec Ledgeren2026-10-14T02:38:52Z9.1 CVSS: Click to Chat for WhatsApp v4.44 Lets Attackers Run Shortcodes Without Loginhttps://infosecledger.com/news/vulnerabilities/9-8-cvss-critical-heap-overflow-in-windows-media/InfoSec Ledgeren2026-10-14T02:00:44Z9.8 CVSS: Critical Heap Overflow in Windows Media Foundation Enables Unauthenticated Network Code Executionhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-aem-6-5-stored-xss-enables-session/InfoSec Ledgeren2026-10-13T23:45:47ZCVSS 9.3: AEM 6.5 Stored XSS Enables Session Hijacking and Privilege Escalationhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-unauthenticated-attackers-read-files-in/InfoSec Ledgeren2026-10-13T23:14:33ZCVSS 9.3: Unauthenticated Attackers Read Files in Adobe ColdFusion RDS Flawhttps://infosecledger.com/news/vulnerabilities/cve-2026-20293-cisco-ucs-secure-boot-bypass/InfoSec Ledgeren2026-10-13T22:25:57ZCVE-2026-20293: Cisco UCS Secure Boot Bypass Requires Auth or Physical Access, No Workarounds Existhttps://infosecledger.com/news/vulnerabilities/cve-2026-105445-docker-hub-patched-critical-token/InfoSec Ledgeren2026-10-13T17:11:14ZCVE-2026-105445: Docker Hub Patched Critical Token Hijacking Flaw After Two-Year Exposurehttps://infosecledger.com/news/cyber-attacks/430m-empire-market-sales-land-operator-with-40/InfoSec Ledgeren2026-10-13T14:50:07Z$430M Empire Market Sales Land Operator With 40-Year Prison Term and $100M Asset Seizurehttps://infosecledger.com/news/vulnerabilities/nvidia-aistore-critical-flaw-lets-attackers/InfoSec Ledgeren2026-10-13T14:10:45ZNVIDIA AIStore Critical Flaw Lets Attackers Revoke Tokens Without Authhttps://infosecledger.com/news/ai/capital-shortage-looms-as-broadcoms-tan-says-ai/InfoSec Ledgeren2026-10-13T12:39:08ZCapital shortage looms as Broadcom's Tan says AI investors lack economic clarityhttps://infosecledger.com/news/vulnerabilities/9-9-cvss-score-marks-marklogic-server-admin/InfoSec Ledgeren2026-10-13T11:41:42Z9.9 CVSS Score Marks MarkLogic Server Admin Takeover Risk in Deprecated APIhttps://infosecledger.com/news/ai/alibabas-new-qwen-glasses-cost-450-add-eye/InfoSec Ledgeren2026-10-13T10:42:46ZAlibaba’s New Qwen Glasses Cost $450, Add Eye-Tracking on Pro Model