⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CVE-2026-14266 is a heap-based buffer overflow in 7-Zip's handling of crafted XZ chunked data. Successful exploitation can allow arbitrary code execution in the context of the current user.
<img width="400" height="234" src="https://socprime.com/wp-content/uploads/CVE-2026-14266-400x234.
<img width="400" height="234" src="https://socprime.com/wp-content/uploads/CVE-2026-64600-400x234.
This advisory highlights RefluXFS, a Linux kernel vulnerability caused by a race condition in XFS copy-on-write handling. An unprivileged local attacker can abuse concurrent O_DIRECT writes to corrupt on-disk data and gain root privileges.
CVE-2026-64600, known as the RefluXFS vulnerability, is a critical Linux kernel flaw that allows local privilege escalation to root. The issue stems from a race condition in the XFS filesystem’s copy-on-write path, enabling an unprivileged local attacker to overwrite protected files on disk.
CVE-2026-64600 is a Linux kernel privilege escalation vulnerability in the XFS filesystem's copy-on-write path. A race condition involving concurrent O_DIRECT writes lets an unprivileged local attacker overwrite protected files and gain root privileges.