All news with #patch release tag

🛡️ Microsoft warns that the KB5127648 security update for Windows 11 can prevent users from re-enabling Smart App Control on affected devices. The feature, which integrates with Microsoft Defender and SmartScreen, may appear grayed out on systems running Windows 11 version 24H2 and later. Devices that already have Smart App Control enabled remain protected. Microsoft published registry and Group Policy workarounds for IT administrators until an official fix is released.

🔔 Amazon RDS for PostgreSQL 19 Release Candidate 1 (RC1) is now available in the Amazon RDS Database Preview Environment, enabling evaluation of the pre-release on Amazon RDS. This RC emphasizes stability with bug fixes and improvements from Beta 4, including better error handling for complex text-search expressions, hardened parallel autovacuum, and more reliable GIN index maintenance. Preview instances are retained up to 60 days, snapshots are Preview-only, and pricing follows the US East (Ohio) Region.

🔒 Next.js released an out-of-band update on October 14 addressing two critical remote code execution flaws and a high-severity denial-of-service issue. The fixes appear in Next.js 16.4.1 and 15.5.28; the RCEs involve React Server Components and librsvg accessed via sharp. Administrators should upgrade, verify sharp versions, rebuild, and redeploy to mitigate exposure.

🔒 Drupal released urgent fixes on October 14 for a critical remote code execution flaw in its core Field UI module, tracked as CVE-2026-108097. The advisory notes the flaw is reachable via contributed modules or custom code, with at least one known path requiring no login. Updates are available for supported branches and uninstalling field_ui is a temporary mitigation. The same releases also address related XSS issues and a critical RCE in the Entity List module.

🛠️ Microsoft has fixed a known issue that caused black screens, desktop loading failures, and Windows Explorer crashes after installing Windows 11 updates released since August. The bug primarily affected Azure Virtual Desktop (AVD) hosts using FSLogix. Microsoft addressed the problem in cumulative updates released on October 13, 2026, and later, and provided a temporary workaround to manually launch explorer.exe for systems that cannot immediately update.

🔒 Palo Alto Networks released security updates to address a high-severity remote code execution flaw (CVE-2026-0322) in the PAN-OS management interface that is under active exploitation. The vulnerability affects PA‑Series, VM‑Series firewalls and Panorama (virtual and M‑Series) but not Cloud NGFW or Prisma Access. Patches and mitigations, including restricting management access to trusted IPs or a jump box, are provided across multiple PAN‑OS versions. The company reported very limited exploitation and shared a few IPs linked to attempted attacks.

🔧 Microsoft resolved a Windows 11 Always On VPN failure introduced by the September 2026 security updates. The bug impacted connections when automatic protocol selection or fallback (IKEv2/SSTP) was used, leaving VPNs stuck in a Connecting state or reporting "The specified port is already in use." The company released KB5127648 and KB5127646 cumulative updates and provided a temporary mitigation to force a single tunneling protocol until the patch is applied.

🔒 A use-after-free in how curl handles HTTP/2 uploads lets a malicious server corrupt client memory and — in a carefully staged case reported publicly — achieve code execution. The flaw, CVE-2026-92392, affects curl/libcurl 8.12.0 through 8.22.0 and was fixed in 8.23.0 on October 14. curl rates it High and urges upgrades or disabling HTTP/2 (via --http1.1 or CURLOPT_HTTP_VERSION). The project shortened its release cycle to ship the fix and credited the report to "Luna with Claude, Anthropic."

🔒 Researchers demonstrated running attacker-controlled code inside a Windows VBS enclave used by Defender SmartScreen. The exploit, tracked as CVE-2026-83498, abused a four-byte write and a timing flaw to bypass enclave checks and replace its dispatch table, enabling code execution in Isolated User Mode. Microsoft patched the issue in the September 8, 2026 update and rated it Critical, noting it was not seen in the wild.

🛡️ Microsoft issued an unprecedented October Patch Tuesday with 1,407 CVEs, including three zero-days and one actively exploited flaw. The release was delayed by hours due to the volume, prompting urgent action from administrators. Key fixes affect Windows Shell, SharePoint, .NET, Exchange, and on-premises Atlassian and GitLab instances. Vendors including IBM, SAP, and Adobe also released critical updates that require immediate attention.

🛡️ Ghostscript contains a critical heap buffer overflow (CVE-2026-39919) that can enable remote code execution via specially crafted PDF files. Discovered by Wordfence's Argus AI on August 23, the issue affects Ghostscript versions 9.21 through 10.07.1 and can be triggered during PDF thumbnail or rendering operations. Administrators should upgrade to Ghostscript 10.08.0 or apply backported fixes, or otherwise block PDF uploads or disable PDF rendering to mitigate exploitation risks.

🛡️ Microsoft released the Windows 10 KB5126657 Extended Security Update, applying October 2026 Patch Tuesday fixes and several bug fixes and changes. The update moves Windows 10 to build 19045.7807 and Windows 10 Enterprise LTSC 2021 to build 19044.7807 and can be installed via Windows Update for ESU-enrolled devices. Key changes include DST updates for parts of Canada, new Manitoba Standard Time, ReFS auditing controls, Storage Spaces recovery fixes, File History reliability fixes, and continued Secure Boot certificate deployment. A known issue affecting some USB Audio Class 1.0 devices remains under investigation with partial mitigation previously released.

🔒 SAP released October 2026 security updates addressing 20 flaws across its products, including a maximum-severity OAuth2 SSRF in the SAP Cloud SDK for Python that can expose client credentials. The vulnerability, tracked as CVE-2026-89111, allows unauthenticated remote attackers who control the tenant_subdomain parameter to redirect token requests. SAP advises using an allowlist for tenant_subdomain as a temporary mitigation and has also fixed additional critical flaws in NetWeaver Visual Composer and Manufacturing Integration and Intelligence.

🛡️ GitLab released patches addressing a maximum-severity regular expression vulnerability (CVE-2026-97229) that could enable unauthenticated remote code execution, alongside fixes for five other high-severity issues affecting its CE and EE platforms. Administrators of self-managed installations are urged to upgrade to the corrected versions immediately; GitLab.com is already patched. The update also remedies flaws that could expose protected variables, allow unauthorized pipeline execution, enable XSS via repository content, and let attackers inject crafted content into AI agent instructions. Some fixes apply only to Enterprise Edition, and GitLab will publicly disclose full details 90 days after this release.

🛡️LG informed users on October 12 of patches for a chained set of three webOS vulnerabilities that let an attacker on the same local network gain root on certain smart TVs without a PIN or owner interaction. The issue was reproduced on models 32LQ636BPSA and 27TQ600SW running webOS 7.5.7-25 (firmware 04.54.40), and LG recommends installing the firmware update; no interim workaround is available. The chain abuses the ThinQ pairing service on port 3001, a sync-demo manifest signed with a test certificate, and the cmp-client app to reach PalmServiceBridge, which enables calling pmlogd and executing commands as root.

🔔 Amazon RDS for SQL Server now supports the latest Microsoft Cumulative Updates, including SQL Server 2025 CU8 KB5104822 (RDS version 17.00.4075.5.v1). The update can be applied via the Amazon RDS Management Console, AWS SDK, or CLI. For details on fixes and improvements, consult the Microsoft KB5104822 documentation. Guidance on upgrading instances is available in the Amazon RDS SQL Server User Guide.

🔔 Amazon RDS for SQL Server now supports Microsoft SQL Server 2025 CU8 (KB5104822) as RDS version 17.00.4075.5.v1. This update brings the latest cumulative fixes and improvements to RDS-managed SQL Server instances. AWS recommends upgrading instances via the Amazon RDS Management Console, AWS SDK, or CLI. See the Amazon RDS SQL Server User Guide for upgrade instructions and Microsoft documentation for detailed KB information.

🔒 Citrix has released a critical security advisory for NetScaler ADC and NetScaler Gateway addressing a memory overflow vulnerability (CVE-2026-107406) that can allow denial of service or remote code execution when configured as a SAML identity provider. Citrix rated the flaw critical with a CVSS v4.0 score of 9.5 and recommends upgrading to patched builds such as 13.1-64.29, 14.1-73.46 or later. The vendor says it is not aware of unmitigated exploits but urges immediate patching amid a recent series of related NetScaler vulnerabilities.

🔒 Researchers published a full working exploit named AnyPwn that targets a pre-authentication heap buffer overflow in AnyDesk Linux, enabling remote root execution before connection approval. AnyDesk patched the bug in version 8.0.3 in June but described the change only as a crash fix; no CVE or advisory has been issued. The exploit targets direct TCP connections on port 7070, is probabilistic, and currently targets build 8.0.2. Administrators should update to 8.0.3 or later and consider restricting port 7070 until mitigated.

🔒 A vulnerability in Nvidia's DCGM Exporter telemetry agent could allow unauthenticated resource exhaustion and information disclosure. The flaw, tracked as CVE-2026-47483, lets attackers crash the monitoring service by abusing the /debug/pprof/ endpoints, potentially disrupting AI workloads on the same host. Nvidia released a patched DCGM Exporter version 4.8.2 and Lava Security recommended restricting public access and disabling profiling where not needed.