#zero-day

3 analyses tagged zero-day, sorted newest first.

high 5 sources
Linux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build Hosts
CISA added Linux kernel CVE-2026-31431 to KEV on 2026-05-01. Theori's Copy Fail research ties the bug to AF_ALG AEAD in-place operation and shows why shared CI runners, Kubernetes nodes, and multi-tenant Linux hosts need kernel patch proof or AF_ALG mitigation.

#linux #kernel #cisa-kev #zero-day #ci-cd

2026-06-01
high 5 sources
Chromium Background Fetch Zero-Day: Persistent Service Worker Exposure
A public Chromium Background Fetch proof of concept showed that a service worker could repeatedly start background fetches after a malicious page visit. Chromium restricted BackgroundFetchManager.fetch() from service-worker contexts on May 21, 2026; downstream deployment remained browser- and channel-specific through June 10.

#google-chrome #chromium #zero-day #security-bypass #cross-site-scripting

2026-05-26
high 3 sources
Windows cldflt.sys Zero-Day: MiniPlasma Kernel LPE
MiniPlasma is a public Windows cldflt.sys Cloud Filter driver LPE proof of concept that BleepingComputer tested on fully patched Windows 11 Pro with May 2026 updates. The article now replaces generic secondary sourcing with exact reporting and narrows the claim to local SYSTEM escalation.

#microsoft #windows #zero-day #privilege-escalation #kernel-exploit

2026-05-26