InfoSecBulletin Cybersecurity for mankind
Google has issued an urgent update for Chrome, fixing 10 security flaws: 3 critical and 7 high severities. This update is being released for Windows, Mac, and Linux users and will reach everyone in the coming days and weeks.
CVE-2026-3536: Integer Overflow in ANGLE – Reported by cinzinga, this vulnerability in the ANGLE graphics engine was awarded a $33,000 bounty.
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Microsoft Patch Tuesday September 2026 Fixed 973 Flaws Fixed, 2 Zero-Days
CVE-2026-3537: Object Lifecycle Issue in PowerVR – This critical flaw, discovered by Zhihua Yao of KunLun Lab, involves heap corruption that could be exploited via a malicious webpage. This researcher was awarded $32,000 for their discovery.
CVE-2026-3538: Integer Overflow in Skia – A critical flaw in the Skia 2D graphics library that could lead to out-of-bounds memory access.
Seven high-severity vulnerabilities were fixed, affecting key browser components like the V8 JavaScript engine, WebAssembly, and CSS, along with other critical flaws.
Action Needed:
Users are strongly advised to update their browser immediately to stay protected. To check whether your browser is up to date, open Google Chrome and navigate to Help > About Google Chrome.
