This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Overview of interesting vulnerabilities
below is an overview of interesting vulnerabilities that we did not cover in more detail: FreeBSD fixes a vulnerability in the tcp_rack module in revisions stable/15-n286003 and releng/15.1-n283633 [1]. Gitea fixes 12 vulnerabilities in versions 1.27.3 and 28.2.0 [2]. Google Chrome fixes 353 vulnerabilities in versions 156.0.7078.47 (Linux) and 156.0.7078.47/.48 (Windows, Mac) [3]. Libarchive fixes multiple vulnerabilities in version 3.9.10 [4]. The Linux Kernel fixes 6 vulnerabilities (LPE, DoS, container isolation bypass) in various subsystems and a serious bug in KVM/x86 allowing a hypervisor isolation breakout [5][6]. Microsoft fixes multiple vulnerabilities in Microsoft Edge, Identity Web and .NET [7][8][9][10][11][12]. MISP fixes 20 vulnerabilities in version 2.5.48 [13]. Mozilla fixes multiple vulnerabilities in Firefox (versions 158.0.1, ESR 153.5.1, ESR 115.43.1) and Thunderbird (versions 158.0.1 and 153.5.1) [14][15][16][17][18]. Oracle has released a quarterly update fixing more than 2000 vulnerabilities in its products [19]. The X.Org Foundation fixes multiple vulnerabilities in the libraries libX11 (1.8.14), libXi (1.8.4), libXpm (3.5.20), libXrender (0.9.13) and libXtst (1.2.6), as well as in xorg-server (21.1.25) and Xwayland (24.1.14) [20].
Links
- [1] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:70.tcp.asc
- [2] https://blog.gitea.com/release-of-28.2.0/
- [3] https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
- [4] https://github.com/libarchive/libarchive/releases/tag/v3.8.10
- [5] https://github.com/V4bel/InfinityCore
- [6] https://www.openwall.com/lists/oss-security/2026/10/19/1
- [7] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85897
- [8] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85890
- [9] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198
- [10] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96199
- [11] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80092
- [12] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197
- [13] https://www.misp-project.org/2026/10/01/misp.2.5.48.released.html/https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/
- [14] https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/
- [15] https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/
- [16] https://www.mozilla.org/en-US/security/advisories/mfsa2026-113/
- [17] https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/
- [18] https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
- [19] https://www.oracle.com/security-alerts/cpuoct2026.html
- [20] https://www.x.org/Development/Security/
By CESNET, z.s.p.o. Ondrej Pavlovič on 21. 10. 2026.