Skip to content
Threat Feed

Tag

Software-Update

8 briefs RSS
medium advisory

Mozilla Firefox: Security Vulnerability Update

Mozilla has released Firefox version 159.0.1 to address unspecified security vulnerabilities affecting earlier versions.

Firefox informational software-update browser
medium advisory

Adobe: Security updates for Substance 3D Painter, Creative Cloud, Campaign Classic, and Connect

The Canadian Centre for Cyber Security has released an advisory concerning multiple security vulnerabilities in various Adobe products, recommending that users and administrators apply available security updates.

Substance 3D Painter +4 vulnerability-management software-update
medium advisory

Samtools: Multiple security vulnerabilities

Multiple security vulnerabilities have been identified and addressed in samtools versions 1.24 and earlier, with patches now available in release 1.25 and backported versions.

samtools vulnerability software-update informational
high advisory

Google Brotli Compression Library Vulnerabilities

Google has released security updates for the Brotli compression library to address vulnerabilities affecting multiple version branches.

Brotli +10 vulnerability software-update rce memory-corruption
1t 1c updated
medium advisory

Multiple Vulnerabilities in GNU Emacs

GNU Emacs is impacted by multiple vulnerabilities that can be leveraged by an attacker to facilitate information disclosure, arbitrary code execution, and denial-of-service.

Emacs vulnerability software-update
1t
critical advisory

Remote Code Execution Vulnerability in SolarWinds Serv-U (CVE-2026-28304)

A critical remote code execution vulnerability (CVE-2026-28304) has been identified in SolarWinds Serv-U versions 15.5.4 HF1 and below, allowing an attacker with high privileges to execute arbitrary code remotely as root, posing a severe risk to affected systems, though with lower impact on Windows deployments.

Serv-U +1 remote-code-execution privilege-escalation vulnerability-exploitation vulnerability cve improper-access-control server software-update +5
5t 8c 3i
high advisory

Capacitor Updater Vulnerability Allows Malicious Update Installation via Private Key Distribution

A vulnerability, CVE-2026-56254, in @capgo/capacitor-updater (Cap-go/capgo) before version 12.128.2 allows an attacker to create and distribute validly signed malicious application updates by leveraging the improper distribution of a private key to each client device, enabling man-in-the-middle or server compromise scenarios.

@capgo/capacitor-updater supply-chain vulnerability code-signing software-update
2t 1c
medium advisory

Intel Addresses Vulnerabilities in Multiple Software Products

Intel released security advisories addressing vulnerabilities in Display Virtualization for Windows OS driver software, Intel EMA software, AI Playground software, and Intel Vision software, requiring users to update to the latest versions.

Display Virtualization for Windows OS driver software +3 vulnerability intel software update windows
3r