Dirty Frag Linux kernel vulnerability enables local privilege escalation to root across major distributions including Ubuntu, RHEL, Fedora, and CentOS, with active exploitation risk.
Flowise AI platform suffers a critical CVSS 10.0 code injection vulnerability, exposing over 12,000 instances to remote code execution and full system compromise.
Microsoft identifies active attacks on on-premises SharePoint Server exploiting CVE-2025-53770, a variant of CVE-2025-49706, and shares mitigation guidance while working on a patch.