What has changed?

CVE-2026-45659 , Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue and mandates patching by 4 July 2026 for US federal agencies, signalling active or imminent exploitation.

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

An unidentified threat actor is actively exploiting CVE-2026-0257 to bypass authentication on PAN-OS GlobalProtect gateways and establish unauthorized VPN connections.

CVE-2026-50521

The vulnerability requires prior network authorization and is covered by standard NVD reporting without active exploitation or geopolitical dimension.

Fast and Furious , Nimbus Manticore Operations During the Iranian Conflict

Iranian state-affiliated APT Nimbus Manticore demonstrates newly adopted techniques including SEO poisoning and enhanced capabilities during active geopolitical conflict, targeting European entities.

25th May , Threat Intelligence Report

Check Point documents a 124% surge in hacktivism and ransomware across Germany, Austria, and Switzerland in 2025,a strategically significant shift in the DACH threat landscape for manufacturing organizations.

CVE-2026-13783: Use After Free in Views in Google Chrome prior to 150.0.7871.47

A use-after-free vulnerability in Google's Views component enables heap corruption via crafted HTML pages when users perform specific UI gestures; critical CVSS score requires immediate update to version 150.0.7871.47 or later.

CVE-2026-13784: Use after free in Views in Google Chrome prior to 150.0.7871.47

Critical heap-corruption vulnerability in Chrome requires user interaction (specific UI gestures) for exploitation and is therefore not remotely exploitable without user engagement.

CVE-2026-14191: Out-of-Bounds Heap Write in WinRAR and UnRAR RAR5 Recovery-Volume Parser , Remote Code Execution

This is the RAR5 sibling of CVE-2023-40477 (fixed only in the RAR3 path through version 6.23); the new vulnerability affects recovery files and requires only that the user perform a test/repair operation on the crafted .rev files.

ZDI-26-276: Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability

Local privilege escalation in Windows Secure Kernel requires already-elevated code execution rights; relevant for systems with compromised privileged user or process accounts.

CVE-2026-13774: Use After Free in Google Chrome Extensions Prior to 150.0.7871.47

The vulnerability enables arbitrary code execution through malicious Chrome extensions and requires user interaction to install the malicious extension.

CVE-2026-13775: Use After Free in GPU in Google Chrome prior to 150.0.7871.47 allows Sandbox Escape

A use-after-free vulnerability in GPU processing allows an attacker with renderer access to achieve full sandbox escape,critical for browser security in production environments.

CVE-2026-13776: Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allows sandbox escape

The vulnerability enables an attacker with renderer-process access to escape the Chrome sandbox and execute arbitrary code,a critical escalation across browser security boundaries.

CVE-2026-13779: Use-after-free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allows remote code execution via malicious network traffic

Critical RCE vulnerability in Chrome Chromoting component requires immediate patching; the flaw is triggered via malicious network packets and affects remote desktop usage.

CVE-2026-13780: Critical Sandbox Escape in Google Chrome Prior to 150.0.7871.47

The vulnerability requires an already-compromised renderer process and thus represents the second stage of a multi-stage attack chain rather than a direct remote code execution vector.

CVE-2026-13781: Critical Sandbox Escape in Google Chrome Prior to 150.0.7871.47

A sandbox-escape vulnerability in Chromium allows an attacker with renderer-process access to break browser isolation and execute arbitrary code on the host system,a critical risk for endpoints running Chrome or Chromium-based browsers.

CVE-2026-13782: Use After Free in Google Chrome Prior to 150.0.7871.47 Allows Sandbox Escape

A critical use-after-free vulnerability in the Chrome renderer enables sandbox escape under certain conditions, potentially leading to complete system compromise.

CVE-2026-13786 , Use After Free in Ozone in Google Chrome prior to 150.0.7871.47 allows remote code execution

A critical use-after-free vulnerability in the Ozone rendering engine enables remote code execution via crafted HTML pages without requiring user interaction.

CVE-2026-13787: Use-After-Free in Chrome Chromoting on Windows Allows Remote Code Execution

A critical use-after-free vulnerability in Chrome's Chromoting component enables remote code execution via malicious network traffic and requires immediate patching on Windows systems using Chrome remote access.

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

An authenticated RCE vulnerability in Fortinet FortiWeb with high CVSS score enables arbitrary code execution and requires prompt patch prioritization in network security infrastructure.

ZDI-26-277: Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability

ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

A kernel vulnerability in win32kfull allows local attackers with low-privilege access to escalate privileges on Windows systems; CVSS 7.8 and active tracking by ZDI.

CVE-2026-13323: Open VSX Registry HTML Injection Enables Supply Chain Attack via Malicious Extensions

The vulnerability allows attackers to deceive authenticated users, steal their session tokens, or generate persistent access tokens to inject malicious extension versions into the Open VSX supply chain.

Microsoft Windows IKE - Critical Vulnerability Threatens Windows VPN Servers

Critical IKE vulnerability in Windows Server affects VPN infrastructure and requires immediate attention for remote-access scenarios.

CVE-2026-13789 , Use-after-free in GPU in Google Chrome prior to 150.0.7871.47 allows sandbox escape

A sandbox-escape vulnerability in GPU processing allows an attacker with access to the renderer process to bypass security isolation.

CVE-2026-13791: Insufficient Input Validation in Google Chrome Downloads Allows Arbitrary Code Execution via Malicious Extension

The vulnerability requires active user interaction (installation of a malicious extension) and thus presents a moderate, not critical, risk if user security training is effective.

CVE-2026-13790: Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47

A side-channel vulnerability in Chrome's Scroll mechanism allows attackers to leak confidential cross-origin data through a crafted HTML page, raising concerns about browser security against subtle timing-based exploits.

CVE-2026-13794: Google Chrome WebAppInstalls Remote Code Execution Vulnerability

For Windows systems with Chrome: High-severity RCE through WebApp installation manipulation requires user interaction but poses elevated risk for industrial workstations.

CVE-2026-13797: Insufficient Input Validation in Chromecast in Google Chrome Prior to 150.0.7871.47 Allows Sandbox Escape

The vulnerability enables sandbox escape after renderer process compromise, but requires prior compromise and is primarily a browser risk with no known active exploitation reported.

CVE-2026-13799: Use After Free in QUIC in Google Chrome prior to 150.0.7871.47

A use-after-free vulnerability in the QUIC protocol enables heap corruption through malicious network traffic without user interaction.

CVE-2026-13800: Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allows local privilege escalation

The vulnerability in the Chrome Updater enables local privilege escalation on Windows systems, but requires system access and a malicious file to exploit.

CVE-2026-13802 Use-after-free in Google Chrome prior to 150.0.7871.47 allows remote code execution

The vulnerability requires specifically manipulated UI gestures from the user, which limits the risk of opportunistic remote exploitation but enables targeted attacks against known users.

CVE-2026-13804: Use-after-free in Chromecast in Google Chrome prior to 150.0.7871.47 allows remote sandbox escape

The vulnerability requires a successfully compromised renderer process as a prerequisite; it is thus relevant for multi-stage exploitation attacks but is addressed in isolation through browser updates.

CVE-2026-13806: Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 allows bypass of site isolation

The vulnerability allows an attacker with control over the renderer process to bypass site isolation, demonstrating that isolation between websites is not guaranteed when the renderer is compromised.

CVE-2026-13803: Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 Allows Sandbox Escape

The vulnerability requires a pre-compromised renderer process and then enables sandbox escape , a two-stage exploitation scenario that underscores the importance of browser isolation and defense-in-depth measures.

CVE-2026-13811: Use-After-Free in IME in Google Chrome Prior to 150.0.7871.47 Allows Remote Code Execution

Use-after-free in Chrome IME enables code execution within sandbox context; requires prompt patching to version 150.0.7871.47 or later.

CVE-2026-13814: Use After Free in Google Chrome prior to 150.0.7871.47

This is a standard patch advisory for a high-severity Chrome vulnerability with no evidence of active exploitation or targeted campaigns.

CVE-2026-13815 , Use After Free in Blink in Google Chrome Prior to 150.0.7871.47 Allows Remote Code Execution

High-severity RCE vulnerability in Blink requires immediate Chrome update to version 150.0.7871.47 or later to prevent sandbox escapes via crafted HTML pages.

CVE-2026-13817: Sandbox Escape Vulnerability in Google Chrome Prior to 150.0.7871.47

A sandbox escape vulnerability in Google Chrome allows attackers to potentially break out of the browser sandbox via crafted HTML pages, enabling arbitrary code execution.

CVE-2026-13821: Use after free in Canvas in Google Chrome prior to 150.0.7871.47

This is a standard patch advisory with no indication of active exploitation or specific attack campaigns.

CVE-2026-13823 , Use After Free in Glic in Google Chrome prior to 150.0.7871.47

Sandbox-escape potential through use-after-free in Chrome renderer enables an attacker with a compromised renderer process to break out of the browser sandbox , threat to endpoint security in web-based attack scenarios.

CVE-2026-13824 , Insufficient Policy Enforcement in Extensions in Google Chrome prior to 150.0.7871.47 Allows Privilege Escalation

The vulnerability enables privilege escalation via crafted HTML pages once the renderer process is compromised, which is relevant for multi-stage attack chains.

CVE-2026-13825 , Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allows remote attacker to potentially exploit heap corruption via crafted HTML page

Heap-corruption vulnerability in Chromium's Dawn graphics engine enables potential remote code execution via crafted HTML pages without additional user interaction.

CVE-2026-13828: Inappropriate Implementation in Google Chrome Prior to 150.0.7871.47 Allows Remote Information Disclosure

An implementation vulnerability in Google Chrome allows remote attackers to obtain potentially sensitive information from process memory via crafted HTML pages.

CVE-2026-13829: Insufficient Input Validation in Google Chrome Settings on Windows Prior to 150.0.7871.47 Allows Sandbox Escape

A sandbox escape vulnerability in the Chrome renderer allows an attacker with control over the renderer process to break security boundaries and potentially execute system code.

CVE-2026-13830: Use After Free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47

A use-after-free vulnerability in Chromoting enables remote code execution via malicious network traffic, affecting Linux systems running Chrome versions prior to 150.0.7871.47.

CVE-2026-13831: Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47

The vulnerability requires a pre-compromised renderer process and is primarily relevant in multi-stage attack chains rather than standalone exploitation.

CVE-2026-13832: Use-After-Free in Headless Google Chrome Prior to 150.0.7871.47 Allows Sandbox Escape

The vulnerability requires prior compromise of the renderer process and enables a sandbox escape , an escalation scenario relevant in targeted attacks.

CVE-2026-13835: Inappropriate XML Implementation in Google Chrome Prior to 150.0.7871.47 Allows Heap Corruption

This is a standard patch notice from the NVD with no indication of active exploitation or specific attack scenarios beyond the basic vulnerability description.

CVE-2026-13834: Insufficient input validation in ANGLE in Google Chrome prior to 150.0.7871.47 allows sandbox escape

This vulnerability allows an attacker with a compromised renderer process to escape the sandbox via crafted HTML content, requiring timely updates of Chrome installations.

CVE-2026-13836: Inappropriate CSS Implementation in Google Chrome Prior to 150.0.7871.47 Allows UXSS

The vulnerability enables remote injection of arbitrary scripts via crafted HTML pages with high severity, posing significant risk to web-based applications and cloud services used by organizations.

CVE-2026-13838 , Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allows remote attacker to bypass same origin policy

A CSS implementation flaw in Chrome allows attackers to bypass the same-origin policy,a fundamental browser security model,which significantly simplifies phishing, credential harvesting, and malware vectors against end users.

CVE-2026-13844: Use-After-Free in Google Chrome Updater on Windows Allows Local Privilege Escalation

A local vulnerability in the Chrome Updater enables privilege escalation on Windows systems, which is relevant for organizations with local security models, as attackers with user access can gain OS-level privileges.

CVE-2026-13840: Insufficient Policy Enforcement in Canvas in Google Chrome Prior to 150.0.7871.47 Allows Cross-Origin Data Leak

A flaw in Canvas policy enforcement enables attackers to extract sensitive cross-origin data through crafted web pages, posing elevated risk to users operating across multiple web contexts.

CVE-2026-13848: Use after free in Forms in Google Chrome prior to 150.0.7871.47 allows remote code execution in sandbox

The vulnerability allows an attacker to execute code within Chrome's sandbox; a sandbox escape is possible if combined with additional vulnerabilities.

CVE-2026-13845: Use After Free in DOM in Google Chrome prior to 150.0.7871.47

The vulnerability enables sandbox escape through DOM manipulation via a crafted HTML page without requiring additional user interaction.

CVE-2026-13849 | Insufficient Input Validation in Chromoting in Google Chrome on Windows Prior to 150.0.7871.47 Allows Local Sandbox Escape

The vulnerability requires local access and file-system interaction, limiting risk in typical enterprise environments where desktop isolation and endpoint detection mechanisms are active.

CVE-2026-13855: Use After Free in Ozone in Google Chrome on Linux prior to 150.0.7871.47

This is an active, critical security flaw in a widely-used browser that can be exploited on Linux systems through minimal user-interaction social engineering.

CVE-2026-13854: Use-After-Free in Chrome Ozone on Linux Prior to 150.0.7871.47 Allows Sandbox Escape

This vulnerability enables sandbox escape following renderer compromise , a multi-stage attack posing elevated risk to Linux systems within manufacturing environments.

CVE-2026-13901: Insufficient Policy Enforcement in Chrome Serial Allows Sandbox Escape

The vulnerability requires prior compromise of the renderer process, which restricts the practical exploitation chain and is primarily relevant in targeted attacks following initial access.

CVE-2026-13920: Insufficient input validation in Media in Google Chrome on Windows prior to 150.0.7871.47 allows sandbox escape

The exploit requires a previously compromised renderer process, which limits immediate exploitability but remains relevant as a second-stage attack following initial compromise.

CVE-2026-13925: Inappropriate implementation in Downloads in Google Chrome on Windows allows remote code execution via crafted HTML page

The vulnerability requires user interaction but enables arbitrary code execution within the browser context, posing significant risk to manufacturing organizations deploying Chrome on Windows endpoints.

CVE-2026-13967: Heap Buffer Overflow in V8 in Google Chrome Prior to 150.0.7871.47

The sandbox escape via a heap buffer overflow in V8 enables attackers to break out of the Chrome sandbox and execute arbitrary code with user privileges.

CVE-2026-13968: Arbitrary Code Execution in Google Chrome DevTools Prior to 150.0.7871.47

The vulnerability requires specific UI gestures and a malicious file delivery, limiting real-world attack risk in production environments; however, prompt update to version 150.0.7871.47 or later is necessary.

CVE-2026-14017: Sandbox Escape in Google Chrome Prior to 150.0.7871.47

A sandbox escape vulnerability in the renderer process allows an attacker with a compromised renderer to break out of browser isolation and potentially gain system-level access , a critical risk beyond mere information disclosure.

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

ClickFix uses API-driven backend servers to distribute polymorphic malware while bypassing Windows script scanning through novel delivery techniques.

[UPDATE] GNU libc: Multiple Vulnerabilities

BSI alert on multiple GNU libc vulnerabilities with broad impact on all Linux systems in production environments; urgency and details depend on the severity level of the underlying CVEs.

Google Chrome and Microsoft Edge: Multiple Vulnerabilities

The BSI warns of multiple vulnerabilities in Chrome and Edge browsers without citing specific CVE IDs, suggesting this is a summary advisory covering already-known or imminent patches.

Ubiquiti UniFi OS Server: Multiple Vulnerabilities

BSI warns of multiple critical vulnerabilities in Ubiquiti UniFi OS Server enabling remote code execution and data compromise , a direct threat to network infrastructure requiring urgent patching.

Adobe Acrobat Reader: Vulnerability Enables Information Disclosure and Code Execution

The BSI alert addresses local code execution in a widely deployed PDF reader commonly used for document handling in production environments; specific CVE identifiers and patch status are needed for prioritization.

Major Update: 382 Security Vulnerabilities Discovered in Google Chrome

An aggregation report covering ~382 partly critical CVEs in Chromium-based browsers without describing an active exploitation campaign or specific attack patterns.

Massive Password Spray Campaign Targeting Azure CLI

Massive credential-spraying attack with 81 million login attempts against Azure CLI indicates coordinated attacks on cloud infrastructure; LSHIY hosting provider as attack infrastructure suggests organized threat actors.

[UPDATE] Apache HTTP Server: Multiple Vulnerabilities

BSI warns of multiple Apache vulnerabilities enabling DoS and security bypasses; without specific CVE details, this is a generic warning without immediate tactical novelty.

Google Chrome: Multiple Vulnerabilities Allow Unspecified Attack

The BSI warns of multiple unspecified vulnerabilities in Google Chrome whose details have not yet been publicly disclosed; exact CVE numbers and patches are pending.

Mozilla Thunderbird, Firefox ESR and Firefox: Multiple Vulnerabilities

The BSI advisory addresses multiple vulnerabilities in widely-used Mozilla products without specifics on CVE numbers or CVSS scores; details are required for patch prioritization.

Synology DiskStation Manager: Multiple Vulnerabilities

BSI warns of multiple vulnerabilities in Synology DSM without naming specific CVE identifiers; details on exact impact and patch status are not clear from this advisory.

Adobe Photoshop: Vulnerability Enables Code Execution

Local code execution in Adobe Photoshop via maliciously crafted files , affects users in product development and design roles.

Adobe Creative Cloud Applications: Multiple Vulnerabilities

BSI warning for multiple vulnerabilities in Adobe Creative Cloud with code-execution potential; no specific CVE IDs or PoC status mentioned in this alert.

The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign

Threat actors distribute manipulated ScreenConnect archives disguised as legitimate freeware utilities (OBS Studio, DS4Windows, DNS Jumper, Glary Utilities) to gain access to enterprise-wide systems.

Hackers target Microsoft 365 accounts with 81 million login attempts

A campaign with 81 million Microsoft 365 login attempts indicates large-scale, automated attacks likely exploiting stolen or weak credentials and potentially bypassing multi-factor authentication.

[UPDATE] OpenSSL: Multiple Vulnerabilities

The BSI warning describes multiple OpenSSL vulnerabilities without specific CVE designations or severity levels , a typical aggregated security alert for critical infrastructure, but requires clarification for prioritization.

7-Zip: Vulnerability Enables Code Execution

A newly discovered RCE vulnerability in 7-Zip when processing NTFS archives requires user interaction but poses significant risk in manufacturing environments where archives are frequently exchanged.

CVE-2026-14087: Heap Buffer Overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47

The vulnerability requires an already-compromised renderer process and is therefore primarily an escalation mechanism after initial compromise, not a primary attack vector.

Chrome needs another whopper update to fix 382 security bugs

Monthly patch announcement for Chrome with 382 security fixes, of which 15 are rated critical and could allow arbitrary code execution outside the browser sandbox.

FortiBleed credential-theft campaign linked to Lynx ransomware

FortiBleed is actively being exploited by the Lynx ransomware group for credential theft prior to ransomware deployment, indicating coordinated attack-chain coordination.

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

ARToken is a fully automated PhaaS panel with 80+ API endpoints for targeted Microsoft 365 phishing, including persistent token acquisition via Microsoft Authentication Broker and SharePoint exfiltration , an escalated threat model compared to earlier EvilTokens reporting.

CVE-2026-13858: Out-of-bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47

An out-of-bounds read vulnerability in FFmpeg within Chrome enables attackers to extract potentially sensitive data from process memory via a crafted video file.

CVE-2026-13865: Insufficient validation of untrusted input in Google Chrome prior to 150.0.7871.47 allows remote attacker to perform UI spoofing

UI spoofing vulnerability in Chrome allows attackers to impersonate browser interface via crafted HTML pages, potentially enhancing phishing campaigns.

CVE-2026-13869: Use-After-Free in Google Chrome on Windows Prior to 150.0.7871.47 Allows Sandbox Escape

A sandbox escape vulnerability allows an attacker with renderer process access to break out of the Chrome sandbox, enabling privilege escalation on Windows systems.

CVE-2026-13874: Race Condition in DataTransfer in Google Chrome Prior to 150.0.7871.47 Allows Information Disclosure

A race condition in the DataTransfer mechanism allows attackers to extract sensitive data from browser process memory via a crafted HTML page,relevant for all employees who handle confidential content in Chrome.

CVE-2026-13877: Insufficient Validation of Untrusted Input in ANGLE in Google Chrome Prior to 150.0.7871.47

The CVE affects a validation flaw in Chrome's ANGLE component that allows an attacker with renderer process access to leak sensitive memory contents,a relatively low risk in stable enterprise environments.

CVE-2026-13893: Insufficient Input Validation in Google Chrome WebUI Allows Cross-Origin Data Leak

A vulnerability in Google Chrome's WebUI allows attackers to leak cross-origin data through malicious network traffic , relevant for organizations relying on Chrome for sensitive business applications.

CVE-2026-13899 , Use After Free in HTML in Google Chrome Prior to 150.0.7871.47

This is a pure patch notice with no evidence of active exploitation or campaigns in the wild.

CVE-2026-13928: Privilege Escalation in Google Chrome Prior to 150.0.7871.47

This is a pure patch notification without reports of active exploitation or targeted campaigns; strategic relevance falls below management escalation threshold.

CVE-2026-13921: Same-Origin Policy Bypass in Google Chrome Prior to 150.0.7871.47

The vulnerability allows an attacker to bypass the same-origin policy via a crafted HTML page, potentially compromising sessions across different origins.

CVE-2026-13935: Side-channel Information Leakage in Google Chrome ComputePressure Prior to 150.0.7871.47

A side-channel vulnerability in Chromium's ComputePressure API enables exfiltration of cross-origin data through crafted HTML pages under specific conditions.

CVE-2026-13951: Insufficient Policy Enforcement in USB in Google Chrome Prior to 150.0.7871.47 Allows Sandbox Escape

The vulnerability requires prior compromise of the renderer process; for attackers this constitutes a two-stage exploit (web-RCE + sandbox-escape) and is thus further limited in practice by modern browser isolation (e.g., Windows Sandbox, separate processes).

CVE-2026-13952 , Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allows cross-origin data leakage

The vulnerability allows attackers to exfiltrate cross-origin data via malicious HTML pages,a direct threat to multi-tab and cloud-based workflows in enterprises.

CVE-2026-13959: Insufficient Input Validation in Blink in Google Chrome Prior to 150.0.7871.47 Allows Remote Same-Origin Policy Bypass

A same-origin policy bypass via crafted HTML pages potentially enables cross-origin access to sensitive data in browser sessions.

CVE-2026-13961: Insufficient Input Validation in Google Chrome DevTools on Windows

The vulnerability requires deliberate user interaction (specific UI gestures) and access to a crafted HTML page, limiting attack risk to advanced social-engineering scenarios.

CVE-2026-13965: Use After Free in Oilpan in Google Chrome prior to 150.0.7871.47

Although the vulnerability is rated Medium severity, it enables code execution within the browser sandbox and should be patched promptly, but is not currently documented as actively exploited.

CVE-2026-13982: Incorrect Security UI in Passwords in Google Chrome Prior to 150.0.7871.47

This is a standard Chromium security update with no indication of active exploitation; the UI-spoofing vulnerability requires prior renderer-process compromise.

CVE-2026-13989 , Google Chrome UI Spoofing Vulnerability Prior to 150.0.7871.47

The vulnerability requires already-compromised renderer processes and is not known to be actively exploited; this is a standard browser patch without geopolitical or campaign implications.

CVE-2026-14023 , Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47

Vulnerability enables bypass of same-origin policy via crafted HTML page without authentication, potentially allowing web-based attacks on locally trusted content.

CVE-2026-14060 , Insufficient input validation in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allows local privilege escalation

A privilege escalation vulnerability in Chromoting requires a local attacker to already have file access on the system , typical of insider or post-compromise scenarios following initial compromise.

CVE-2026-14133 - Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allows UI spoofing via crafted HTML page

A race condition in history management enables UI spoofing, but is low-severity and requires user interaction with a crafted HTML page.

Synology DiskStation Manager: Vulnerability Enables Information Disclosure

The vulnerability requires existing authentication, but does not fully reduce exposure risk for NAS systems available via remote access.

[UPDATE] Mozilla Firefox, Firefox ESR and Thunderbird: Multiple Vulnerabilities

The BSI has published an update warning on multiple unspecified vulnerabilities in Firefox, Firefox ESR and Thunderbird; specific CVE identifiers and exploitation reports are not provided in this notice.

Microsoft Patchday April 2026

Microsoft Edge: Multiple Vulnerabilities

The advisory contains no CVE numbers or specific vulnerability details; this is a generic precautionary notice without current exploitation evidence.

[UPDATE] Linux Kernel: Multiple Vulnerabilities

BSI alert on Linux Kernel vulnerabilities lacks CVE details, complicating prioritization for Ubuntu deployments; specific CVEs needed for patch management.

[UPDATE] TeamViewer: Vulnerability Enables Unspecified Attack

A BSI notification regarding a vague TeamViewer vulnerability without CVE assignment and lacking detailed attack scenarios suggests preventive awareness rather than active exploitation.