{ "status": "success", "total": 5807, "page": 1, "per_page": 24, "total_pages": 242, "filter_tab": "all", "source": "All", "severity": "All", "query": "", "data": [ { "id": "feed_ba013b14a8bc9a30", "cve_id": "SANS Internet Storm Center", "title": "ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)", "severity": "Moderate", "vendor": "SANS Internet Storm Center", "product": "Operational Threat Radar", "kb_number": "", "release_date": "2026-11-02", "timestamp": 1793584803, "description": "Latest threat intelligence analysis from SANS Internet Storm Center: ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd).", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://isc.sans.edu/diary/rss/33480", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "SANS Internet Storm Center" }, { "id": "feed_5d7adb06ae584dbc", "cve_id": "BleepingComputer", "title": "FBI links $6.3 billion Binance crypto heist to North Korean hackers", "severity": "Critical", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793563073, "description": "The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/security/fbi-links-63-billion-binance-crypto-heist-to-north-korean-hackers/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "feed_5a7654baf2a91aa2", "cve_id": "SecurityAffairs", "title": "FBI Blames North Korea for $6 Billion Binance Crypto Theft", "severity": "Moderate", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793560994, "description": "The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft of more than $6 billion in virtual assets from the crypto exchange Binance, on or about October 29, 2026. The bureau published its findings in a public alert . The\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://securityaffairs.com/202221/apt/fbi-blames-north-korea-for-6-billion-binance-crypto-theft.html", "feed_type": "news", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_7eccebf61236d468", "cve_id": "SecurityAffairs", "title": "SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6", "severity": "Moderate", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793556144, "description": "Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnera\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://securityaffairs.com/202216/ai/security-affairs-ai-cybersecurity-newsletter-round-6.html", "feed_type": "news", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_931141d7902c6751", "cve_id": "SecurityAffairs", "title": "SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121", "severity": "Important", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793553924, "description": "Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps deepveindrilling.com: Magento CMS block loader hits 953 stores CLAUDE CODE FOUND SPYWARE ON MY FAMI\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://securityaffairs.com/202209/malware/security-affairs-malware-newsletter-round-121.html", "feed_type": "news", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_d6448e6ee754fd41", "cve_id": "BleepingComputer", "title": "Alpine Linux rebuilds GitLab after attempted RCE attack", "severity": "Critical", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793545881, "description": "Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "feed_a45c5035f5e72c95", "cve_id": "BleepingComputer", "title": "OpenAI says it's doubling Pro usage limits and bringing Work features to Chat", "severity": "Moderate", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793541191, "description": "OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-doubling-pro-usage-limits-and-bringing-work-features-to-chat/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "feed_3c8d87cd91cb57ea", "cve_id": "CVE-2026-118539", "title": "Security Affairs newsletter Round 602 by Pierluigi Paganini \u2013 INTERNATIONAL EDITION", "severity": "Critical", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793539378, "description": "A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog Attackers Exploit Criti\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Zero-Day Alert", "is_zero_day": 1, "source_url": "https://securityaffairs.com/202200/breaking-news/security-affairs-newsletter-round-602-by-pierluigi-paganini-international-edition.html", "feed_type": "news", "image_url": "/rss/assets/images/zeroday_alert_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_12ff1d29a6431495", "cve_id": "CVE-2026-58882", "title": "SMS of Death: Android under attack, an invisible SMS can block calls and emergency services", "severity": "Critical", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793535410, "description": "SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash Android\u2019s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and can even comp\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Zero-Day Alert", "is_zero_day": 1, "source_url": "https://securityaffairs.com/202184/security/sms-of-death-android-under-attack-an-invisible-sms-can-block-calls-and-emergency-services.html", "feed_type": "news", "image_url": "/rss/assets/images/zeroday_alert_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_dd7879ab65bf2bdd", "cve_id": "SANS Internet Storm Center", "title": "OneNote File Extraction, (Sun, Nov 1st)", "severity": "Moderate", "vendor": "SANS Internet Storm Center", "product": "Operational Threat Radar", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793524343, "description": "Recently, I had to extract embedded files from a set of OneNote files (extension .one).", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://isc.sans.edu/diary/rss/33478", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "SANS Internet Storm Center" }, { "id": "feed_52aac2454bba3318", "cve_id": "Help Net Security", "title": "Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability", "severity": "Important", "vendor": "Help Net Security", "product": "Enterprise Cyber Defense", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793523600, "description": "Here\u2019s an overview of some of last week\u2019s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of r/opensource, Reddit\u2019s catch-all forum for open source software, have barred any project that \u201cuses AI, is made by AI, or is intended for AI.\u201d Moderator Wolvereness announced the rules \u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.helpnetsecurity.com/2026/11/01/week-in-review-binance-hit-by-6-3-billion-theft-impact-of-brotli-vulnerability/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "Help Net Security" }, { "id": "feed_47c9e2c2f127bea1", "cve_id": "The Hacker News", "title": "CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key", "severity": "Critical", "vendor": "The Hacker News", "product": "Threat Intelligence", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793523091, "description": "A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If t\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://thehackernews.com/2026/11/critical-lxd-and-microcloud-flaw-cvss.html", "feed_type": "news", "image_url": "https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4Vibbj3miGalyf0avn_Z2WlLhFh5cC5ImXGFlOL0cisgxikHCcLzHjOVM3qO5B47V3uw62rWH6m6fP1svsH3TCG6i9sS19BIXn1CsDjKK3gnG6VQxkFwghemdeBlV4_AM5Ah-_TJ3T_5Gv-D5Pygrm-B5yzQnDqvIXmI2FyAeuzk57_l6esdhNrTMBj0/s1600/linux-vm.jpg", "source_name": "The Hacker News" }, { "id": "feed_3c8da2a0b6d392cf", "cve_id": "The Hacker News", "title": "Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script", "severity": "Important", "vendor": "The Hacker News", "product": "Threat Intelligence", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793517940, "description": "Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about \u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html", "feed_type": "news", "image_url": "https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhe0B28qLAtUMfqN29_phxZJVJORICkj_98MZFwDiXAxFTABw8G9qbsVyD98pg7T_Rvgv83NXyR5tNGYH4dRwlxs3QFTUZxDPHQs2BgFsnmGcOuVW1HkFVCfiCR3Y05kPQrfFx4S7A8DiFXXAAgdc5SiEKx0-0xrW5rNlNSyN3jZJcyXasdpCr5AG7KM3s/s1600/Polymarket.jpg", "source_name": "The Hacker News" }, { "id": "feed_e1dc1203c72851bb", "cve_id": "The Hacker News", "title": "FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist", "severity": "Critical", "vendor": "The Hacker News", "product": "Threat Intelligence", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793516580, "description": "The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, along with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html", "feed_type": "news", "image_url": "https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmb1j0HC3RkKxZ4bBQPaOa5GaLqC2EBtxXHOMnebPlgHGDJG7ryIuSBIR-9YBQuUm6HwD15-OJQgBvIkhbLIApM8XoU0DptSEF6DNhEpinxPA-06wQZhLhRiKmFGO5cVjONcaouGC3lqybhkeEsZj-xebX6u6hSR19mS7sVqOrpR02qNOlpHZJEUjf1HtB/s1600/binance-hack.png", "source_name": "The Hacker News" }, { "id": "feed_4432f1dbea0caa5b", "cve_id": "The Hacker News", "title": "NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection", "severity": "Important", "vendor": "The Hacker News", "product": "Threat Intelligence", "kb_number": "", "release_date": "2026-11-01", "timestamp": 1793516578, "description": "Cybersecurity researchers have disclosed details of what has been described as a \"highly sophisticated infection chain\" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET asse\u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://thehackernews.com/2026/11/netamloader-malware-targets-government.html", "feed_type": "news", "image_url": "https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy0oLNj9TVg8ifLKdJSg4HH1EhN3m_OBldd7wEIeVoQSHtFXSmsiPdmf-njsPD-CbVHY8NckeW2N9rN8-CTnp81zaeFq-ISj04O7ihoj5HgnvJT_zY_0fdC8vCcd5LXL8Mx9ym1fPI5GMrEtjxZoEiernCr_CZwLocgtrJsKZzixEnYUe2WmkehWLNR2hx/s1600/windows-hacker.jpg", "source_name": "The Hacker News" }, { "id": "feed_8cfd90d0e49e929f", "cve_id": "CVE-2026-111357", "title": "U.S. CISA adds Ivanti Connect Secure\u00a0flaws to its Known Exploited Vulnerabilities catalog", "severity": "Critical", "vendor": "SecurityAffairs", "product": "Cyber Crime & Data Breaches", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793475216, "description": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog : CVE-2026-111357 (CVSS score of 8.8) \u2013 A \u2026", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Zero-Day Alert", "is_zero_day": 1, "source_url": "https://securityaffairs.com/202175/security/u-s-cisa-adds-ivanti-connect-secure-flaws-to-its-known-exploited-vulnerabilities-catalog.html", "feed_type": "news", "image_url": "/rss/assets/images/zeroday_alert_hero.jpg", "source_name": "SecurityAffairs" }, { "id": "feed_a4df36c045ad0e87", "cve_id": "BleepingComputer", "title": "Northflank security breach leads to abuse of customers' AI API keys", "severity": "Critical", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793469672, "description": "Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "feed_72aec30d186370a7", "cve_id": "CVE-2026-58882", "title": "New Android SMS of Death exploit can remotely crash unpatched phones", "severity": "Important", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793460911, "description": "A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed \"SMS of Death\" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "feed_dd695362ecd889ae", "cve_id": "BleepingComputer", "title": "Reddit to lock content behind logins to fight scrapers", "severity": "Moderate", "vendor": "BleepingComputer", "product": "Cyber Defense & Malware", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455515, "description": "Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a \"logged-in service,\" offering limited access to visitors without accounts. [...]", "remediation": "Review advisory findings, isolate suspect endpoints, and verify threat signatures.", "exploit_status": "Threat Intelligence", "is_zero_day": 0, "source_url": "https://www.bleepingcomputer.com/news/security/reddit-to-lock-content-behind-logins-to-fight-scrapers/", "feed_type": "news", "image_url": "/rss/assets/images/cyber_lead_hero.jpg", "source_name": "BleepingComputer" }, { "id": "CVE-2026-91732", "cve_id": "CVE-2026-91732", "title": "Chromium CVE-2026-91732: Missing authorization", "severity": "Moderate", "vendor": "Microsoft", "product": "Windows / Microsoft 365", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455200, "description": "This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.", "remediation": "Deploy cumulative update via Windows Update or Microsoft Update Catalog.", "exploit_status": "Patch Available", "is_zero_day": 0, "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91732", "feed_type": "msrc", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "Microsoft MSRC" }, { "id": "CVE-2026-118359", "cve_id": "CVE-2026-118359", "title": "Chromium: CVE-2026-118359 Memory corruption in V8", "severity": "Moderate", "vendor": "Microsoft", "product": "Windows / Microsoft 365", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455200, "description": "This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.", "remediation": "Deploy cumulative update via Windows Update or Microsoft Update Catalog.", "exploit_status": "Patch Available", "is_zero_day": 0, "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118359", "feed_type": "msrc", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "Microsoft MSRC" }, { "id": "CVE-2026-118358", "cve_id": "CVE-2026-118358", "title": "Chromium: CVE-2026-118358 Memory corruption in WebAudio", "severity": "Moderate", "vendor": "Microsoft", "product": "Windows / Microsoft 365", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455200, "description": "This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.", "remediation": "Deploy cumulative update via Windows Update or Microsoft Update Catalog.", "exploit_status": "Patch Available", "is_zero_day": 0, "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118358", "feed_type": "msrc", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "Microsoft MSRC" }, { "id": "CVE-2026-118357", "cve_id": "CVE-2026-118357", "title": "Chromium: CVE-2026-118357 Use after free in FileSystem", "severity": "Moderate", "vendor": "Microsoft", "product": "Windows / Microsoft 365", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455200, "description": "This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.", "remediation": "Deploy cumulative update via Windows Update or Microsoft Update Catalog.", "exploit_status": "Patch Available", "is_zero_day": 0, "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118357", "feed_type": "msrc", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "Microsoft MSRC" }, { "id": "CVE-2026-118356", "cve_id": "CVE-2026-118356", "title": "Chromium: CVE-2026-118356 Use after free in WTF", "severity": "Moderate", "vendor": "Microsoft", "product": "Windows / Microsoft 365", "kb_number": "", "release_date": "2026-10-31", "timestamp": 1793455200, "description": "This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.", "remediation": "Deploy cumulative update via Windows Update or Microsoft Update Catalog.", "exploit_status": "Patch Available", "is_zero_day": 0, "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118356", "feed_type": "msrc", "image_url": "/rss/assets/images/windows_patch_hero.jpg", "source_name": "Microsoft MSRC" } ] }