… Tag CVE ID CVE Title Severity .NET CVE-2026-45491 .NET Tampering Vulnerability Important .NET CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability Important Active Directory Domain Services CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical … …
… The number of bugs in each vulnerability category is listed below: 61 Elevation of Privilege Vulnerabilities 6 Security Feature Bypass Vulnerabilities 31 Remote Code Execution Vulnerabilities 14 Information Disclosure Vulnerabilities 8 Denial of Service Vulnerabilities 13 Spoofing Vulnerabilities W… …
… "As I mentioned in that post, going forward I would be doing full public disclosure for any security bugs I found in VSCode." This follows another stream of zero-days in various Microsoft products disclosed by an anonymous security researcher using the 'Nightmare Eclipse' online handle who also exp… …
… Cybersecurity and Infrastructure Security Agency CISA also added a critical command injection flaw CVE-2010-5330 in Ubiquiti AirOS to its catalog of actively exploited vulnerabilities and ordered federal agencies to secure their devices within three weeks. …
… While the exact circumstances that triggered this spree of exploit leaks are still unclear, Nightmare Eclipse previously said that these disclosures are in protest of how Microsoft's Security Response Center MSRC handled the disclosure process for other security flaws they reported in the past. …
Drupal critical update to fix bug with high exploitation risk By Bill Toulas May 20, 2026 08:52 AM Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. …
… BleepingComputer has contacted Microsoft for a comment on Chaotic Eclipse’s latest exploit leaks, and a spokesperson stated that the company is committed to investigating reported security issues, "and update impacted devices to protect customers as soon as possible." "We also support coordinated v… …
… It was soo bad at some point I was wondering if I was dealing with a massive corporation or someone who is just having fun seeing me suffer but it seems to be a collective decision." Microsoft previously told BleepingComputer that it supports coordinated vulnerability disclosure and is committed to… …
… Microsoft previously reacted to the disclosures with warnings that it would work with law enforcement when people engage in "malicious activity causing real harm to our customers," leading many in the cybersecurity community to think Microsoft was threatening the researcher. …
… "This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise," the U.S. cybersecurity agency warned at the time. …