Tag

#Exploited Vulnerabilities

7 published stories tagged with Exploited Vulnerabilities.

highExploited VulnerabilitiesJun 3, 2026·4 min read

VS Code Zero-Day Exposes GitHub Tokens to Theft via Malicious Links

A zero-day vulnerability in Visual Studio Code (VS Code) allows attackers to steal GitHub OAuth tokens with just one click.

highExploited VulnerabilitiesJun 2, 2026·4 min read

Actively Exploited Linux and Android Flaws Prompt Urgent Patching by CISA

Two vulnerabilities have been actively exploited: a Linux kernel flaw allowing unexpected namespace isolation bypasses (CVE-2022-0492) and an Android issue enabling local privilege escalation without

highExploited VulnerabilitiesJun 2, 2026·2 min read

Critical Oracle WebLogic Flaw Enables Unauthorized Data Access; Urgent Patching Recommended

An unauthenticated vulnerability in Oracle WebLogic Server has been exploited in the wild, allowing attackers to gain unauthorized access to critical data.

highExploited VulnerabilitiesJun 2, 2026·3 min read

Critical Zero-Days Expose Acer Wave 7 Routers to Credential Theft and Backdoor Access

Acer's Wave 7 mesh routers are under threat from two critical zero-day vulnerabilities that could allow attackers to access plaintext credentials and gain persistent backdoor access.

criticalExploited VulnerabilitiesJun 2, 2026·3 min read

Hackers Exploit Critical WordPress Plugin Flaw for Admin Account Takeovers

A critical vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress has been actively exploited by hackers to hijack user accounts, including admin accounts.

highExploited VulnerabilitiesJun 2, 2026·2 min read

Microsoft Faces Legal Threats After Public Disclosure of Exploited Zero-Days

A researcher known as Nightmare Eclipse publicly disclosed several unpatched Microsoft vulnerabilities, leading to legal threats from Microsoft.

mediumExploited VulnerabilitiesJun 2, 2026·3 min read

Windows 10 Snipping Tool Vulnerability Enables Network Spoofing by Attackers

An unpatched vulnerability in Microsoft's Windows 10 Version 1607 Snipping Tool allows unauthorized actors to spoof over a network, posing medium severity risks.