Trending now

CVE-2026-109618 is a remote code execution (RCE) vulnerability affecting the PHP core. The flaw reportedly impacts a wide range of PHP versions, specifically versions 5, 6, 7, and 8. While specific technical details have been withheld by researchers to prevent exploitation, cybersecurity firm watchTowr confirmed the vulnerability's validity and successfully reproduced it in their testing environment. The vulnerability was originally under embargo for a coordinated disclosure on October 22, 2026, but details of the flaw leaked early on October 20, 2026, via a post on Hacker News. In response to the premature leak, the PHP security team accelerated its release timeline, scheduling emergency security updates for October 21, 2026, to address the issue.

CVE-2026-109619 is a remote code execution (RCE) vulnerability affecting the PHP scripting language. Security researchers and early reports indicate that the flaw impacts PHP versions 5, 6, 7, and 8. While specific technical details regarding the vulnerability's mechanics have not been publicly disclosed, successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code with the privileges of the underlying PHP process. The vulnerability was originally scheduled for coordinated disclosure under embargo on October 22, 2026. However, after information about the flaw leaked online on October 20, the PHP security team accelerated its timeline, scheduling a security release for October 21, 2026, at 14:00 UTC. Security organizations and researchers have advised administrators to prepare to apply the upcoming patches as soon as they are released.

CVE-2025-24071 involves the exposure of sensitive information in Windows File Explorer, potentially allowing an attacker to perform spoofing over a network. This vulnerability arises from how Windows Explorer handles specially crafted .library-ms files within RAR/ZIP archives. When such an archive is extracted, Windows Explorer automatically parses the .library-ms file due to its indexing and preview mechanisms. If the .library-ms file contains a SimpleLocation tag pointing to an attacker-controlled SMB server, Windows Explorer attempts to resolve this path, triggering an NTLM authentication handshake and potentially sending the victim's NTLMv2 hash without explicit user interaction. This implicit trust and automatic processing of certain file types upon extraction can be exploited to leak credentials.

**CVE-2026-112457** is a double free vulnerability affecting the Remote Management component in Apple's macOS. Discovered by security researchers Efstratios Kaplanellis of Almamater Technologies and Nathaniel Oh, the flaw can be exploited by an attacker on a local network to cause unexpected system termination or corrupt process memory. Apple addressed the issue by implementing improved memory management in its software updates. The fix is included in macOS Golden Gate 27.2, macOS Tahoe 26.7.2, and macOS Sequoia 15.8.2. Users are advised to update their operating systems to these versions or later to protect their systems from potential exploitation.

CVE-2026-84498 is a security vulnerability affecting Apple's macOS operating system, specifically within the Universal Disk Format (UDF) file system component. Discovered by security researcher Nathaniel Oh, the flaw allows a local application to bypass standard memory boundaries and disclose sensitive kernel memory. The vulnerability primarily impacts systems running macOS Tahoe. Apple resolved the issue in its October 2026 security updates by implementing improved memory handling mechanisms. To protect against potential exploitation that could lead to unauthorized information disclosure, users are encouraged to update their devices to macOS Tahoe 26.7.2 or other corresponding patched versions of Apple's operating systems.

CVE-2026-112622 is a security vulnerability affecting the Wi-Fi component of various Apple operating systems, including macOS, iOS, iPadOS, tvOS, visionOS, and watchOS. Discovered by security researcher Nathaniel Oh (@calysteon), the flaw stems from an out-of-bounds read issue. An attacker within radio range or in a privileged network position can exploit this vulnerability to trigger a denial-of-service condition, leading to unexpected system termination. Apple addressed the vulnerability in its October 2026 security updates by implementing improved bounds checking. The fix has been deployed across affected platforms, including macOS Golden Gate 27.2, macOS Tahoe 26.7.2, macOS Sequoia 15.8.2, iOS and iPadOS 18.7.11, iOS and iPadOS 26.7.2, iOS and iPadOS 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Users are advised to update their devices to these versions or later to resolve the issue.

CVE-2026-112482 is a security vulnerability affecting Apple's Screen Sharing Server component in macOS. Discovered by security researcher Nathaniel Oh (@calysteon), the flaw stems from an out-of-bounds write issue. If exploited by an attacker on the local network, the vulnerability can allow them to corrupt process memory. Apple addressed this vulnerability in its October 26, 2026 security updates by implementing improved bounds checking. The fix is available in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

CVE-2026-112443 is a security vulnerability affecting the Wi-Fi component in Apple operating systems, including macOS Golden Gate and macOS Tahoe. Discovered by security researcher Nathaniel Oh (@calysteon), the flaw stems from a memory handling issue. If exploited, an attacker within radio range of the target device can trigger unexpected system termination, or a malicious application can cause system termination and corrupt process memory. Apple addressed this vulnerability in its October 26, 2026 security updates by implementing improved memory handling mechanisms. Users can resolve the issue by updating their systems to the latest versions, such as macOS Golden Gate 27.2 or macOS Tahoe 26.7.2.

**CVE-2026-112511** is a path handling vulnerability affecting Apple's macOS Screen Sharing Server. Discovered by security researcher Nathaniel Oh (@calysteon), the flaw stems from improper path handling logic within the Screen Sharing component. If exploited, a malicious Screen Sharing peer can leverage this issue to create arbitrary symbolic links (symlinks) with root privileges on the target system. Apple addressed this vulnerability by implementing improved path handling logic in its security updates released in October 2026. The fix is included in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. Users are advised to update their systems to these versions or later to mitigate the risk of exploitation.

CVE-2026-113946 is an out-of-bounds write vulnerability that affects the CoreStorage component in Apple's macOS. Discovered by security researchers Nathaniel Oh, Jakob Pammer, and Peter Malone, the flaw can be exploited by a local application to cause unexpected system termination or corrupt kernel memory. Apple resolved the issue by implementing improved bounds checking to prevent the out-of-bounds write. The fix was officially released on October 26, 2026, and is available in macOS Golden Gate version 27.2.