Heap overflow in kernel driver due to missing size validation
CVSSv3 Score: 7.3 A buffer copy without checking size of input vulnerability [CWE-120] in FortiClient Windows may allow
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
2 sources
RHSA-2026:54246: Moderate: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
RHSA-2026:54180: Important: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
RHSA-2026:54168: Important: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
3 sources
ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must
Connected reporting, one intelligence threadzerodayinitiative.com
6 sources
RHSA-2026:53990: Important: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:51422: Important: Red Hat build of MicroShift 4.19.42 security update
Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include
2 sources
DSA-6431-1 openjdk-25 – security update
https://security-tracker.debian.org/tracker/DSA-6431-1
Connected reporting, one intelligence threadlists.debian.org
USN-8627-1: Yelp vulnerability
It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security
CVE-2026-59131
Medium Severity Description No cwe for this issue in AMD Zen allows an authorized attacker to disclose information
CVE-2026-59127
High Severity Description Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.