https://patchgazette.com/news/vulnerabilities/video-stitch-cve-2026-110645-allows-os-command/Patch Gazetteen2026-10-14T15:46:32ZVideo-stitch CVE-2026-110645 Allows OS Command Injection in Node.jshttps://patchgazette.com/news/vulnerabilities/net-xml-library-patch-available-for-high-severity/Patch Gazetteen2026-10-14T14:42:37Z.NET XML Library Patch Available for High-Severity Denial of Service Flawhttps://patchgazette.com/news/vulnerabilities/microsoft-releases-net-runtime-patches-for-high/Patch Gazetteen2026-10-14T14:11:20ZMicrosoft releases .NET runtime patches for high-severity symlink privilege escalationhttps://patchgazette.com/news/vulnerabilities/microsoft-patches-net-8-11-to-fix-high-severity/Patch Gazetteen2026-10-14T11:38:46ZMicrosoft patches .NET 8-11 to fix high-severity WPF RCE flaw in preview buildshttps://patchgazette.com/news/vulnerabilities/microsoft-patches-windows-server-zero-day-crash/Patch Gazetteen2026-10-14T11:01:42ZMicrosoft Patches Windows Server Zero-Day Crash Flaw CVE-2026-70111https://patchgazette.com/news/vulnerabilities/microsoft-updates-asp-net-core-8-9-10-to-fix/Patch Gazetteen2026-10-14T09:53:54ZMicrosoft updates ASP.NET Core 8, 9, 10 to fix remote DoS via HTTP/3 deadlock flaw CVE-2026-70186https://patchgazette.com/news/vulnerabilities/microsoft-fixes-xml-algorithmic-complexity-flaw/Patch Gazetteen2026-10-14T09:23:16ZMicrosoft fixes XML algorithmic complexity flaw CVE-2026-69651 in .NET 8-11 runtimes to block remote DoS attackshttps://patchgazette.com/news/vulnerabilities/microsoft-fixes-asp-net-core-email-auth-flaw-in/Patch Gazetteen2026-10-14T09:23:16ZMicrosoft fixes ASP.NET Core email auth flaw in versions 8, 9, and 10https://patchgazette.com/news/vulnerabilities/microsoft-to-harden-refs-on-removable-media-in/Patch Gazetteen2026-10-14T07:33:43ZMicrosoft to harden ReFS on removable media in Windows 11https://patchgazette.com/news/vulnerabilities/fortinet-patches-critical-fortisandbox-gui-auth/Patch Gazetteen2026-10-14T07:23:10ZFortinet patches critical FortiSandbox GUI auth bypass in CVE-2026-107656https://patchgazette.com/news/vulnerabilities/linux-vhost-iotlb-cache-bug-enables-kernel-read/Patch Gazetteen2026-10-14T07:10:31ZLinux vhost IOTLB cache bug enables kernel read/write and guest escapehttps://patchgazette.com/news/vulnerabilities/microsoft-postscript-printer-driver-flaw-cvss-9-8/Patch Gazetteen2026-10-14T04:55:22ZMicrosoft PostScript Printer Driver Flaw CVSS 9.8 Requires Immediate Attentionhttps://patchgazette.com/news/vulnerabilities/nvd-rates-windows-error-reporting-heap-overflow-9/Patch Gazetteen2026-10-14T04:16:06ZNVD Rates Windows Error Reporting Heap Overflow 9.8 Critical for Unauthenticated Remote Code Executionhttps://patchgazette.com/news/vulnerabilities/tyche-softwares-abandoned-cart-pro-critical-sql/Patch Gazetteen2026-10-14T04:14:07ZTyche Softwares Abandoned Cart Pro: Critical SQL Injection Lets Attackers Hijack Admin Accountshttps://patchgazette.com/news/vulnerabilities/printcart-store-v2-9-1-flaw-google-drive-endpoint/Patch Gazetteen2026-10-14T03:12:29ZPrintcart Store v2.9.1 Flaw: Google Drive Endpoint Lets Attackers Run Code Without Loginhttps://patchgazette.com/news/vulnerabilities/adfs-crypto-signature-bug-cve-2026-96252-enables/Patch Gazetteen2026-10-14T01:00:38ZADFS Crypto Signature Bug CVE-2026-96252 Enables Network Spoofing With 9.1 CVSS Scorehttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-users-urged-to-enable-production/Patch Gazetteen2026-10-14T00:55:21ZAdobe ColdFusion Users Urged to Enable Production Secure Profile Against Critical Unauthenticated File Readhttps://patchgazette.com/news/vulnerabilities/cve-2026-48382-critical-aem-auth-flaw-enables/Patch Gazetteen2026-10-13T22:46:16ZCVE-2026-48382: Critical AEM Auth Flaw Enables Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/cvss-9-9-aem-6-5-flaw-enables-remote-code/Patch Gazetteen2026-10-13T22:46:16ZCVSS 9.9 AEM 6.5 Flaw Enables Remote Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-2023-2025-patch-urgent-cvss-10-0/Patch Gazetteen2026-10-13T22:40:18ZAdobe ColdFusion 2023/2025 Patch Urgent: CVSS 10.0 Zero-Click RCE Vulnerability CVE-2026-106624 Discoveredhttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-critical-cve-2026-105903-enables/Patch Gazetteen2026-10-13T21:47:38ZAdobe ColdFusion Critical CVE-2026-105903 Enables Remote Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/microsoft-patches-kestrel-http-smuggling-flaw-cve/Patch Gazetteen2026-10-13T21:18:26ZMicrosoft patches Kestrel HTTP smuggling flaw CVE-2026-88092 for ASP.NET Core 8-11 on all platformshttps://patchgazette.com/news/vulnerabilities/microsoft-quic-heap-overflow-patches-available/Patch Gazetteen2026-10-13T20:36:48ZMicrosoft QUIC Heap Overflow Patches Available for .NET 8 Through 11 on Windowshttps://patchgazette.com/news/vulnerabilities/previdian-defused-sonicwall-sma1000-ssrf-ssrf/Patch Gazetteen2026-10-13T16:27:30ZPrevidian, Defused: SonicWall SMA1000 SSRF SSRF probes hit unpatched gateways 2 days post-fixhttps://patchgazette.com/news/tech/microsoft-unveils-maia-300-inference-chip/Patch Gazetteen2026-10-13T13:11:05ZMicrosoft unveils Maia 300 inference chip featuring 2nm chiplets and 288GB HBM4 memoryhttps://patchgazette.com/news/tech/mozilla-sells-firefox-enterprise-in-europe-with/Patch Gazetteen2026-10-13T13:07:55ZMozilla sells Firefox Enterprise in Europe with local console to block shadow AI and enforce data policieshttps://patchgazette.com/news/tech/microsoft-install-security-updates-now-to-keep/Patch Gazetteen2026-10-13T06:58:43ZMicrosoft: Install security updates now to keep Windows patching after 2027 certificate expiryhttps://patchgazette.com/news/tech/google-adds-transcript-toggle-for-mobile-live/Patch Gazetteen2026-10-13T06:46:47ZGoogle adds transcript toggle for mobile Live Translate, potentially skipping smart glasseshttps://patchgazette.com/news/tech/ledger-blames-cryptobilis-for-93m-theft-after/Patch Gazetteen2026-10-13T06:30:17ZLedger Blames CryptoBilis for $93M Theft After Finding LTE Implant in Walletshttps://patchgazette.com/news/tech/android-authority-editor-identifies-five-samsung/Patch Gazetteen2026-10-13T06:30:17ZAndroid Authority Editor Identifies Five Samsung Galaxy Phones With Poor Value Propositionhttps://patchgazette.com/news/tech/airbus-vet-canguilhem-to-lead-stormshield-as-ceo/Patch Gazetteen2026-10-13T05:55:25ZAirbus vet Canguilhem to lead Stormshield as CEO from 2027https://patchgazette.com/news/tech/ambi-raises-26m-to-launch-continuous-ambient-ai/Patch Gazetteen2026-10-13T05:12:27ZAmbi Raises $26M to Launch Continuous Ambient AI Apps for Apple Deviceshttps://patchgazette.com/news/tech/toms-hardware-tests-gigabytes-1-300-nit-240hz-350/Patch Gazetteen2026-10-13T04:34:53ZTom's Hardware Tests Gigabyte's 1,300-Nit, 240Hz $350 OLED Gaming Monitorhttps://patchgazette.com/news/vulnerabilities/us-targeted-in-unauthenticated-ssrf-attacks-on/Patch Gazetteen2026-10-13T04:34:46ZUS Targeted in Unauthenticated SSRF Attacks on SonicWall SMA 1000 Applianceshttps://patchgazette.com/news/tech/virgin-actives-louise-john-says-6-week-software/Patch Gazetteen2026-10-13T04:33:14ZVirgin Active’s Louise John says 6-week software rollouts disrupt planned IT service deliveryhttps://patchgazette.com/news/tech/ultrahuman-to-build-uae-wide-health-age-model/Patch Gazetteen2026-10-13T04:15:02ZUltrahuman to build UAE-wide health-age model using wearable and clinical datahttps://patchgazette.com/news/tech/microsoft-unveils-maia-300-chip-targets-ai/Patch Gazetteen2026-10-13T03:49:29ZMicrosoft unveils Maia 300 chip, targets AI inference dominance by 2027https://patchgazette.com/news/tech/shyglass-mac-app-requires-screen-recording/Patch Gazetteen2026-10-13T02:44:13ZShyGlass Mac App Requires Screen Recording Permission for Head-Tracking Privacy Blurhttps://patchgazette.com/news/tech/android-users-can-boost-location-precision-with/Patch Gazetteen2026-10-13T02:44:13ZAndroid Users Can Boost Location Precision With Built-in Accuracy Servicehttps://patchgazette.com/news/tech/applied-materials-unveils-5b-center-with-intel/Patch Gazetteen2026-10-13T01:29:38ZApplied Materials Unveils $5B Center With Intel, TSMC, Samsung To Slash Chip R&D Cycles By 30%https://patchgazette.com/news/tech/who-cites-missing-data-on-russian-researcher/Patch Gazetteen2026-10-13T00:42:02ZWHO cites missing data on Russian researcher death, limits plague risk assessmenthttps://patchgazette.com/news/tech/nvidia-dlss-4-5-and-amd-fsr-4-boost-frame-rates/Patch Gazetteen2026-10-12T23:57:04ZNVIDIA DLSS 4.5 and AMD FSR 4 boost frame rates on older GPUs without hardware upgradeshttps://patchgazette.com/news/tech/attackers-manipulate-danfoss-controllers-to-raise/Patch Gazetteen2026-10-12T23:09:22ZAttackers manipulate Danfoss controllers to raise temps to 122F, forcing food disposal at major French chainshttps://patchgazette.com/news/vulnerabilities/nvd-flags-critical-cve-2026-90920-in-ibm-maximo/Patch Gazetteen2026-10-12T22:28:43ZNVD Flags Critical CVE-2026-90920 in IBM Maximo AI Service 9.1.0, 9.2.0https://patchgazette.com/news/tech/neowin-outlines-method-to-locate-third-party/Patch Gazetteen2026-10-12T19:20:02ZNeowin Outlines Method to Locate Third-Party Services on Windows Machineshttps://patchgazette.com/news/tech/sucuri-warns-padlock-doesnt-guarantee-security/Patch Gazetteen2026-10-12T18:51:57ZSucuri warns padlock doesn't guarantee security, highlights key management as encryption's biggest hurdlehttps://patchgazette.com/news/tech/us-probe-into-tesla-robotaxi-school-zone-speeding/Patch Gazetteen2026-10-12T17:16:35ZUS Probe Into Tesla Robotaxi School Zone Speeding May Stall EU Software Approval