These CVEs are getting brutal
October 27, 2026 at 2:39 PM
These CVEs are getting brutal
i fucking love CVEs
October 27, 2026 at 11:11 PM
i fucking love CVEs
okay that's all of them. that's all the CVEs. we're done now thx
October 24, 2026 at 2:40 AM
okay that's all of them. that's all the CVEs. we're done now thx
Just patched OpenSSL 4.0.3 for 14 CVEs — use-after-free in X.509 cache, five QUIC issues, SM2 side-channels on ARM64 & RISC-V. https://rodhat.com/motd/2026-10-26-openssl-403-14-cves-quic-timing-side-channel/
October 27, 2026 at 8:15 PM
Just patched OpenSSL 4.0.3 for 14 CVEs — use-after-free in X.509 cache, five QUIC issues, SM2 side-channels on ARM64 & RISC-V. https://rodhat.com/motd/2026-10-26-openssl-403-14-cves-quic-timing-side-channel/
CVEs will continue until morale improves
October 23, 2026 at 9:41 PM
CVEs will continue until morale improves
The common vulnerability and exposures count is going vertical. 3% of all CVEs have been found in just the last month.
October 23, 2026 at 4:07 AM
The common vulnerability and exposures count is going vertical. 3% of all CVEs have been found in just the last month.
We just released 11 CVEs for Bandit, most being 8.7 (HIGH), so please update to version 1.14.0 ASAP. Thanks to @mtrudel.bsky.social for triaging and fixing these vulnerabilities promptly ❤️ #ElixirLang
October 26, 2026 at 3:45 PM
We just released 11 CVEs for Bandit, most being 8.7 (HIGH), so please update to version 1.14.0 ASAP. Thanks to @mtrudel.bsky.social for triaging and fixing these vulnerabilities promptly ❤️ #ElixirLang
Okay I'm back, how many CVEs while I was in there
Absolutely packed theater on a Wednesday night for you can see everything
October 22, 2026 at 6:07 AM
Okay I'm back, how many CVEs while I was in there
The fun thing to realize about this chart is that the skyrocketing CVEs we now know about were how the three letter agencies were pwning everything left right and center :)
Spending years on an assurance feature you fail to ship, when you have 3 year release cycles, and *this* is happening?
October 24, 2026 at 10:19 PM
The fun thing to realize about this chart is that the skyrocketing CVEs we now know about were how the three letter agencies were pwning everything left right and center :)
Wait until we start getting CVEs for PDS implementations 🙃
October 28, 2026 at 1:25 AM
Wait until we start getting CVEs for PDS implementations 🙃
let's just do all the cves at once, so we can patch all our stuff in one go
October 21, 2026 at 8:07 PM
let's just do all the cves at once, so we can patch all our stuff in one go
Being at a tech conference while all these CVEs drop has been wild
October 22, 2026 at 7:53 AM
Being at a tech conference while all these CVEs drop has been wild
a deluge of CVEs (like PHP)
October 27, 2026 at 8:55 PM
a deluge of CVEs (like PHP)
i dislike being zerg-rushed by CVEs
October 28, 2026 at 8:21 AM
i dislike being zerg-rushed by CVEs
I have 11 accepted security vulnerabilities (CVEs) for iOS 27.2 and macOS 27.2
The most interesting ones is a macOS SIP bypass and a macOS sandbox escape.
support.apple.com/en-us/149230
support.apple.com/en-us/149521
The most interesting ones is a macOS SIP bypass and a macOS sandbox escape.
support.apple.com/en-us/149230
support.apple.com/en-us/149521
I have 8 accepted security vulnerabilities for iOS 27 and macOS 27
support.apple.com/en-us/149034
support.apple.com/en-us/149035
support.apple.com/en-us/149034
support.apple.com/en-us/149035
About the security content of iOS 27 and iPadOS 27 - Apple Support
This document describes the security content of iOS 27 and iPadOS 27.
support.apple.com
October 28, 2026 at 2:53 AM
I have 11 accepted security vulnerabilities (CVEs) for iOS 27.2 and macOS 27.2
The most interesting ones is a macOS SIP bypass and a macOS sandbox escape.
support.apple.com/en-us/149230
support.apple.com/en-us/149521
The most interesting ones is a macOS SIP bypass and a macOS sandbox escape.
support.apple.com/en-us/149230
support.apple.com/en-us/149521
this is the best "dis u?" i've gotten
October 23, 2026 at 7:22 PM
this is the best "dis u?" i've gotten
the kernel is where the cves go silly!
October 28, 2026 at 3:35 PM
the kernel is where the cves go silly!
man i wish we hadn't abolished the government agency that kept good track of CVEs huh
October 21, 2026 at 11:40 PM
man i wish we hadn't abolished the government agency that kept good track of CVEs huh
Given the state of the web this month, perhaps nuxt will be adding some RCE CVEs in solidarity !!
October 28, 2026 at 2:30 PM
Given the state of the web this month, perhaps nuxt will be adding some RCE CVEs in solidarity !!
"ah, it's only an 8.1, this might be fine" and other things i've said today about CVEs
October 22, 2026 at 8:30 PM
"ah, it's only an 8.1, this might be fine" and other things i've said today about CVEs
Got curious and had Claude whip these up from the cvelistv5 repo.
October 24, 2026 at 11:03 PM
Got curious and had Claude whip these up from the cvelistv5 repo.
Gm, looking forward to what lovely CVEs the world will grant us on this beautiful day ☺️
October 22, 2026 at 12:21 PM
Gm, looking forward to what lovely CVEs the world will grant us on this beautiful day ☺️