Pinned Post
Google's 9 November Chrome update fixes nine bugs, including CVE-2026-125350, a use-after-free in XML that Google says is exploited in the wild. Update to Chrome 157.0.8103.50 (Linux) or 157.0.8103.50/.51 (Windows, Mac) and relaunch.
OpenAI announced Patch the Planet on 22 June 2026, a Daybreak initiative with Trail of Bits that reviews findings and helps patch open-source projects before they reach maintainers. Projects can apply to join. In October the programme helped coordinate the response to critical PHP flaws; operators should apply the official PHP fixes.
A low-severity flaw in Qt Network HTTP response handling (CVE-2026-116337, CVSS 4.0 score 0.6) can let a malicious or compromised server make a Qt app run out of memory. Update to Qt 6.8.10, Qt 6.12.1 or later, or apply Qt's patches.
IBM's 6 November advisory covers a stored cross-site scripting flaw in Tivoli Netcool/OMNIbus Web GUI 8.1.0 through 8.1.0.41. Apply Fix Pack 42 (8.1.0.42) to close it.
Barracuda's November 2026 patches close two flaws that, together, can give root on email gateways and other appliances. Apply the firmware patches and keep the admin interface off the public internet.