選單
A A A
A A A

Information Security Alerts

The following products have discovered critical security vulnerabilities recently.  These vulnerabilities could allow remote attackers to invade your devices. It is strongly recommended updating your following product versions to the latest immediately.

 

  • Active Vulnerabilities to be concerned
Product Vulnerability Publish Date
WordPress WordPress Remote Code Execution Vulnerability (CVE-2026-65640)[new] 13 Aug 2026
Zoom Zoom Multiple Vulnerabilities[new] 12 Aug 2026
Linux Linux Kernel Local Privilege Escalation and Container Escape Vulnerability “SCTPhantom” (CVE-2026-64564)[new] 11 Aug 2026
WordPress WordPress Pre-Authenticated XSS Vulnerability “XSS2Shell” (CVE-2026-64638)[new] 10 Aug 2026
Linux Linux Kernel XFS Local Privilege Escalation Vulnerability “RefluXFS” (CVE-2026-64600) 24 Jul 2026
WordPress WordPress Remote Code Execution Vulnerabilities “wp2shell” (CVE-2026-63030 & CVE-2026-60137) 20 Jul 2026
Linux Linux Kernel KVM Guest-to-Host Escape Vulnerability “Januscape” (CVE-2026-53359) 9 Jul 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “GhostLock” (CVE-2026-43499) 9 Jul 2026
Joomla Remote Code Execution Vulnerability in Joomla JCE Editor (CVE-2026-48907) 6 Jul 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Bad Epoll” (CVE-2026-46242) 6 Jul 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “DirtyClone” (CVE-2026-43503) 29 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “pedit COW” (CVE-2026-46331) 29 Jun 2026
Fortinet Fortinet FortiGate and SSL VPN Credential Harvesting Campaign “FortiBleed” 18 Jun 2026
Adobe Adobe Multiple Vulnerabilities 11 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “CIFSwitch” (CVE-2026-46243) 2 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “PinTheft” (CVE-2026-43494) 22 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “DirtyDecrypt / DirtyCBC” (CVE-2026-31635) 19 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Fragnesia” (CVE-2026-46300) 15 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Dirty Frag” (CVE-2026-43284, CVE-2026-43500)   8 May 2026
Palo Alto PAN-OS Remote Code Execution Vulnerability (CVE-2026-0300) 6 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Copy Fail” (CVE-2026-31431)   4 May 2026

 

 

 

 

 

 

 

  • Active Ransomware to be concerned
Ransomware Publish Date
The Gentlemen Ransomware[new] 12 Aug 2026

 

 

  • For General Users:
Product Vulnerability Publish Date
Google Chrome Google Chrome Skia and V8 Vulnerabilities (CVE-2026-3909 & CVE-2026-3910 17 Mar 2026
Google Chrome Google Chromium Remote Code Execution Vulnerability (CVE-2026-2441) 20 Feb 2026
Google Chrome Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) 17 Dec 2025
WinRAR Zero-Day WinRAR Path Traversal Vulnerability (CVE-2025-8088) 14 Aug 2025
Google Chrome Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) 17 Dec 2025
  • For Technical Professionals:
Product Vulnerabilities Publish Date
ASP.NET ASP.NET Elevation of Privilege (CVE-2026-40372) 22 Apr 2026
ASP.NET ASP.NET Security Feature Bypass Vulnerability (CVE-2025-55315) 23 Oct 2025
Fortinet FortiWeb Authentication Bypass Vulnerability (CVE-2025-52970) 18 Aug 2025
Facebook Instagram Telegram 中大綠色辦公室計劃
種族多元共融僱主約章 2024-2025 無障礙網頁嘉許計劃 - 金獎級別
© 2026 香港中文大學 版權所有