CVE Tools
Track your stack

В фокусе RVD: трендовые уязвимости июня

Хабр — Информационная безопасностьBy sea-team

Rounduplinux kernelpan-os

Our summary

In June, R-Vision highlighted 4 high-impact “trending” vulnerabilities: CVE-2026-43500 and CVE-2026-43284 in Linux (Dirty Frag) enabling local root privilege escalation via page cache manipulation, and affecting common distributions such as Ubuntu, Debian, and RHEL. It also covered CVE-2026-0257 in Palo Alto Networks PAN-OS GlobalProtect, where an Authentication Override configuration flaw can allow attackers to forge VPN cookies and bypass authentication/MFA, with CVE-2026-0257 listed in CISA KEV. Finally, CVE-2026-44815 in Windows DHCP Client can be triggered remotely by a malicious DHCP response to achieve SYSTEM-level arbitrary code execution, making timely patching critical.

Read at Хабр — Информационная безопасность

Хабр — Информационная безопасность publishes this story on its own site; we link to it rather than reprint it.

  1. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2026-43284, CVE-2026-43500
  2. The Hacker NewsHacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance MinistryCVE-2026-43284, CVE-2026-43500
  3. BleepingComputerNew Januscape Linux flaw allows VM escape on Intel, AMD devicesCVE-2026-43284, CVE-2026-43500
  4. The Hacker News16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 SystemsCVE-2026-43284, CVE-2026-43500
  5. Хакер (xakep.ru)Linux-уязвимость DirtyClone помогает повысить права до уровня rootCVE-2026-43284, CVE-2026-43500
  6. SecurityWeek‘DirtyClone’ Linux Kernel Vulnerability Leads to Root AccessCVE-2026-43284, CVE-2026-43500
  7. The Hacker NewsNew DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned PacketsCVE-2026-43284, CVE-2026-43500
  8. Хабр — Информационная безопасностьИюньский «В тренде VM»: уязвимости ядра Linux, Microsoft Defender и устройств Palo Alto NetworksCVE-2026-43284, CVE-2026-43500
  9. The Hacker NewsResearchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight ModelsCVE-2026-43284, CVE-2026-43500
  10. Rapid7 BlogMetasploit Wrap Up 05/29/2026CVE-2026-43284, CVE-2026-43500

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store