Source: HackerNews front

TL;DR Zoom published two security bulletins on November 10, 2026, for Zoom Workplace for Windows. The worst flaw, CVE-2026-108186, carries a Critical CVSS score of 9.6. A second bug, CVE-2026-108187, scores 8.1. Both allow escalation of privilege over the network. Two flaws in Zoom Workplace for Windows let an unauthenticated attacker escalate privileges via network access. Version 7.1.8 fixes both. Update the Windows client now.

TL;DR A researcher using the handle MSNightmare published full details and a working proof-of-concept exploit for SignDrop on November 10, 2026. This unpatched Windows CLFS zero-day lets a standard user gain SYSTEM privileges. It abuses the very CLFS authentication mitigation that Microsoft added to block earlier attacks. SignDrop turns Microsoft's CLFS log-file signing feature into a local privilege escalation path. Exploit source code is now public on GitHub, and no patch exists yet.

TL;DR Researcher Gaspar Onesto De Luca has released a working proof-of-concept exploit for CVE-2026-97798. This Windows Error Reporting vulnerability carries a CVSS score of 7.8. The PoC turns a standard user account into an interactive SYSTEM shell. Microsoft patched the flaw in its October 13, 2026, security updates. CVE-2026-97798 is an argument injection bug in the Time Travel Debugging path of Windows Error Reporting (WER).

TL;DR Security researcher Mas0nShi released full details and exploit code for CVE-2026-112445. This flaw is a simple macOS privilege escalation bug in launchd daemons. It lets a standard desktop user gain root rights without a password. Therefore, Mac users must update their systems right away. They need to keep their Macs safe from harm. Why It Matters Apple supports over 100 million active Macs, based on market data.

TL;DR Security researchers publicly released exploit code for a local privilege flaw in Apple macOS. Tracked as CVE-2026-112487, this macOS revisiond vulnerability lets a standard local user seize root access in under one second. Apple patched the flaw in macOS Golden Gate. Therefore, administrators should update all Mac systems right away. Why It Matters Apple supports over 100 million active Mac devices worldwide, according to market data.

TL;DR TeamViewer published security bulletin TV-2026-1011 on October 27, 2026, addressing three high-severity TeamViewer vulnerabilities across Windows, macOS, Linux, and Android clients. These flaws allow attackers to execute arbitrary code via crafted screen data or escalate local privileges to root on macOS. Users and administrators must update their installations to version 15.83 or the latest legacy builds immediately. Why It Matters…

Google's kernelCTF program has published full technical details and a working proof-of-concept exploit for CVE-2026-23111. This Linux nf_tables vulnerability is a use-after-free bug in the kernel's Netfilter packet filter. A local attacker can use it to gain root and escape a container. Red Hat rates the flaw 7.8 (High) on the CVSS scale. TL;DR A one-character logic error lets an attacker drain a chain's reference count.

Cybersecurity researcher Erica Windisch recently disclosed critical vulnerabilities affecting Tailscale SSH implementations. Specifically, research published on the Tailworm research portal details severe Unix socket forwarding and permission flaws. An attacker controlling an authorized device can exploit forwarding paths to reach privileged services. Consequently, adversaries can escalate privileges and capture full root access on target nodes. Privilege Escalation Across Authorized Tailnet Nodes…

TL;DR A full write-up and exploit are now public for CVE-2026-23074, a Linux kernel privilege escalation flaw in the teql traffic-control scheduler. The use-after-free dates back to Linux 2.6.12, the start of the kernel's Git history in 2005. Researchers used it to gain root and escape a container on Google's Container-Optimized OS in the kernelCTF program. Why It Matters The bug survived in the kernel's networking code for about two decades.

TL;DR Rapid7 researchers disclosed 17 security flaws in Zimbra Collaboration Suite (ZCS) that break authentication, mailbox isolation, and host privilege boundaries. These vulnerabilities allow attackers to hijack user sessions via cross-site scripting, read arbitrary mailboxes, and escalate local privileges to root. Administrators must apply the latest Zimbra patch releases immediately and audit server configurations. Why It Matters Zimbra Collaboration Suite is an enterprise email and collaboration platform used by thousands of government agencies and businesses worldwide.

TL;DR Trend Micro's Zero Day Initiative (ZDI) posted details of several unpatched Linux kernel vulnerabilities to the public kernel mailing list on October 22, 2026. Two KSMBD flaws carry a CVSS score of 9.0 and can lead to remote code execution. Fixes are still moving through kernel development branches. Why It Matters Security bugs normally go to the private kernel security team first.

TL;DR Portainer has fixed two critical Portainer vulnerabilities, each rated CVSS 9.4, that let standard users mount host files into containers. One extends a bind mount bypass that survived two earlier fixes, CVE-2026-44849 and CVE-2026-44850. Both lead to root on the Docker host, and Portainer 2.45.2 fixes both. Why It Matters Portainer is a popular web interface for managing Docker, Swarm, Podman and Kubernetes.

TL;DR Researcher Hyunwoo Kim has published full details and proof-of-concept exploits for six Linux kernel vulnerabilities he calls "Infinity Core." Five of them lead to local privilege escalation and container escape, and one crashes the kernel. Upstream fixes exist, so admins should install patched kernels now. Why It Matters These bugs sit in core kernel code: timers, signals, memory management, futex, the scheduler and the SLAB allocator.

TL;DR Citrix released two high-severity bulletins covering seven flaws in XenServer and UniconOS. This Citrix security update matters most for XenServer, where three bugs could let a privileged guest compromise or crash the host. UniconOS also gets fixes, including a CVSS 8.5 local privilege escalation flaw. Why It Matters XenServer hosts many virtual machines on one server. A guest-to-host escape breaks that isolation and exposes every other VM on the machine.

TL;DR Security researcher Fourie Zhang from the TencentOS Security Team and Corvus AI disclosed CVE-2026-74580, a high-severity memory corruption flaw dubbed Vghost. Furthermore, the researchers publicly released the full technical details and proof-of-concept exploit code for this Linux vhost vulnerability. Tracked with a CVSS score of 8.8, the flaw enables both local root privilege escalation and virtual machine escape across nearly a decade of Linux kernel releases.