選單
A A A
A A A

Information Security Alerts

The following products have discovered critical security vulnerabilities recently.  These vulnerabilities could allow remote attackers to invade your devices. It is strongly recommended updating your following product versions to the latest immediately.

 

  • Phishing Alerts
  • Active Vulnerabilities to be concerned
Product Vulnerability Publish Date
Linux Linux Kernel Local Privilege Escalation Vulnerability “Dirty Frag” (CVE-2026-43284, CVE-2026-43500) [new]  8 May 2026
Palo Alto PAN-OS Remote Code Execution Vulnerability (CVE-2026-0300) [new] 6 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Copy Fail” (CVE-2026-31431) [new]  4 May 2026
ASP.NET ASP.NET Elevation of Privilege (CVE-2026-40372) [new] 22 Apr 2026
Google Chrome Google Chrome Skia and V8 Vulnerabilities (CVE-2026-3909 & CVE-2026-3910 17 Mar 2026
Google Chrome Google Chromium Remote Code Execution Vulnerability (CVE-2026-2441) 20 Feb 2026

 

  • For General Users:
Product Vulnerability Publish Date
WinRAR Zero-Day WinRAR Path Traversal Vulnerability (CVE-2025-8088) 14 Aug 2025
Google Chrome Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) 17 Dec 2025

 

  • For Technical Professionals:
Product Vulnerabilities Publish Date
ASP.NET ASP.NET Security Feature Bypass Vulnerability (CVE-2025-55315) 23 Oct 2025
Fortinet FortiWeb Authentication Bypass Vulnerability (CVE-2025-52970) 18 Aug 2025
Facebook Instagram Telegram 中大綠色辦公室計劃
種族多元共融僱主約章 2024-2025 無障礙網頁嘉許計劃 - 金獎級別
© 2026 香港中文大學 版權所有