Product

Linux

Made by Linux. 31 of its vulnerabilities are known to have been exploited.

Coverage

Severity: ElevatedAction: Be aware

Chrome Dev for Desktop Update

The Dev channel has been updated to 157.0.8081.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.126) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Stable Channel Update for Desktop

The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security changes will be updated shortly Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a…

Severity: ElevatedAction: Be aware

Chrome Beta for Desktop Update

The Chrome team is excited to announce the promotion of Chrome 156 to the Beta channel for Windows, Mac and Linux. Chrome 156.0.8078.4 contains our usual under-the-hood performance and stability tweaks, but there are also some cool new features to explore - please head to the Chromium blog to learn more! A partial list of changes is available in the Git log . Interested in switching release channels? Find out how…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.92) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Chrome Dev for Desktop Update

The Dev channel has been updated to 156.0.8072.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: ElevatedAction: Be aware

Chrome Beta for Desktop Update

The Beta channel has been updated to 155.0.8059.12 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.57) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: CriticalAction: Patch

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 154 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 154.0.8037.57 (Linux) 154.0.8037.57/.58 Windows/Mac contains a number of fixes and improvements -- a list of changes is available in the log . Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in…

Patch

Apply the vendor's security update for Windows, Chrome and Linux.

Severity: HighAction: PatchCISA KEV

Siemens SIPLUS and SIMATIC Products

View CSAF Summary Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens SIPLUS and SIMATIC Products are…

Patch

Apply the vendor's security update for Linux.

Severity: HighAction: PatchExploitation: ExploitedCISA KEV

Linux Kernel Race Condition Vulnerability (CVE-2025-39964) is being actively exploited, CISA warns

CISA added CVE-2025-39964 (Linux Kernel) to its Known Exploited Vulnerabilities catalog on September 18, 2026, which means there is reliable evidence of exploitation in the wild. Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.

Why it matters

CISA lists this as exploited in the wild. Unpatched Linux systems are exposed to active attacks now.

Patch

Apply the vendor's security update for Linux.

Severity: HighAction: PatchExploitation: ExploitedCISA KEV

Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2026-53266) is being actively exploited, CISA warns

CISA added CVE-2026-53266 (Linux Kernel) to its Known Exploited Vulnerabilities catalog on September 18, 2026, which means there is reliable evidence of exploitation in the wild. Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The…

Why it matters

CISA lists this as exploited in the wild. Unpatched Linux systems are exposed to active attacks now.

Patch

Apply the vendor's security update for Linux.

Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-39682) is being actively exploited, CISA warns

CISA added CVE-2025-39682 (Linux Kernel) to its Known Exploited Vulnerabilities catalog on September 18, 2026, which means there is reliable evidence of exploitation in the wild. Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling…

Why it matters

CISA lists this as exploited in the wild. Unpatched Linux systems are exposed to active attacks now.

Act now

Treat this as an emergency.

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Coverage

    ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

    Basis: Reporting by Dark Reading

  2. Coverage

    Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

    Basis: Reporting by SecurityWeek

  3. Coverage

    Chrome Dev for Desktop Update

    Basis: Google Chrome Releases (vendor advisory)

  4. Coverage

    Chrome for Android Update

    Basis: Google Chrome Releases (vendor advisory)

  5. Coverage

    Stable Channel Update for Desktop

    Basis: Google Chrome Releases (vendor advisory)

  6. Coverage

    Chrome Beta for Desktop Update

    Basis: Google Chrome Releases (vendor advisory)

  7. Coverage

    Chrome for Android Update

    Basis: Google Chrome Releases (vendor advisory)

  8. Coverage

    New Spectre v2 attack variant leaks Linux root password hash in minutes

    Basis: Reporting by BleepingComputer

Actively exploited

Linux Kernel

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Added Sep 18, 2026Fed. due Sep 21, 2026Coverage →

Linux Kernel

Linux Kernel Out-of-Bounds Write Vulnerability

Added Sep 18, 2026Fed. due Sep 21, 2026Coverage →

Linux Kernel

Linux Kernel Unspecified Vulnerability

Added Aug 27, 2026Fed. due Aug 30, 2026

Linux Kernel

Linux Kernel Out-of-Bounds Write Vulnerability

Added Aug 26, 2026Fed. due Sep 9, 2026

Linux Kernel

Linux Kernel Improper Authentication Vulnerability

Added Jun 2, 2026Fed. due Jun 5, 2026

Linux Kernel

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Added May 1, 2026Fed. due May 15, 2026Coverage →

Linux Kernel

Linux Kernel Integer Overflow Vulnerability

Added Jan 26, 2026Fed. due Feb 16, 2026

Linux Kernel

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Added Oct 6, 2025Fed. due Oct 27, 2025

Linux Kernel

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Added Sep 4, 2025Fed. due Sep 25, 2025

Linux Kernel

Linux Kernel Improper Ownership Management Vulnerability

Added Jun 17, 2025Fed. due Jul 8, 2025

Linux Kernel

Linux Kernel Out-of-Bounds Access Vulnerability

Added Apr 9, 2025Fed. due Apr 30, 2025

Linux Kernel

Linux Kernel Out-of-Bounds Read Vulnerability

Added Apr 9, 2025Fed. due Apr 30, 2025

Linux Kernel

Linux Kernel Use of Uninitialized Resource Vulnerability

Added Mar 4, 2025Fed. due Mar 25, 2025

Linux Kernel

Linux Kernel Out-of-Bounds Write Vulnerability

Added Feb 5, 2025Fed. due Feb 26, 2025
CVE-2017-1000253RansomwareCVSS 7.8

Linux Kernel

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Added Sep 9, 2024Fed. due Sep 30, 2024

Linux Kernel

Linux Kernel Heap-Based Buffer Overflow Vulnerability

Added Aug 21, 2024Fed. due Sep 11, 2024

Linux Kernel

Linux Kernel Use-After-Free Vulnerability

Added Jun 26, 2024Fed. due Jul 17, 2024
CVE-2024-1086RansomwareCVSS 7.8

Linux Kernel

Linux Kernel Use-After-Free Vulnerability

Added May 30, 2024Fed. due Jun 20, 2024

Linux Kernel

Linux Kernel Improper Input Validation Vulnerability

Added May 12, 2023Fed. due Jun 2, 2023