ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability
This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. User interaction
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability
This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User interaction is
CVE-2026-50076
Critical Severity Description Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK
CVE-2026-50266
Low Severity Description In OpenStack Neutron before 28.0.1, a project manager can create or update a port on
CVE-2026-49942
Critical Severity Description Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of
DSA-6322-1 frr – security update
https://security-tracker.debian.org/tracker/DSA-6322-1
RHSA-2026:23420: Important: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:23419: Important: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:23418: Important: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker must
ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker