Geek-Guy.com

Tag: little

CVE-2026-20643: Vulnerability in WebKit Navigation API May Bypass Same Origin Policy

Just a little over a month after fixing the actively exploited CVE-2026-20700 zero-day, Apple has now issued its first Background Security Improvements release to address CVE-2026-20643, a WebKit vulnerability that could allow maliciously crafted web content to bypass the Same Origin Policy, one of the browser’s core security boundaries. The issue in the limelight adds…

Keenadu: Android malware that comes preinstalled and can’t be removed by users

There’s too little a user can do when hit with a complex Android malware that comes preinstalled on their new smartphone or tablet. Security researchers at Kaspersky have flagged a multifaceted Android malware dubbed Keenadu that can ship preinstalled via device firmware, compromising users before they even complete setup. “Keenadu serves as a reminder that…

CVE-2026-20805: Microsoft Fixes Actively Exploited Windows Desktop Manager Zero-Day

As 2026 gets underway, the pace of critical vulnerability disclosures shows little sign of easing. Following the recent MongoBleed (CVE-2025-14847) revelation, Microsoft has kicked off the year with its first Patch Tuesday release, addressing 114 security flaws across its product ecosystem. Among them is a zero-day vulnerability that was already being exploited in real-world attacks,…

CVE-2026-20805: Microsoft Fixes Actively Exploited Windows Desktop Manager Zero-Day

As 2026 gets underway, the pace of critical vulnerability disclosures shows little sign of easing. Following the recent MongoBleed (CVE-2025-14847) revelation, Microsoft has kicked off the year with its first Patch Tuesday release, addressing 114 security flaws across its product ecosystem. Among them is a zero-day vulnerability that was already being exploited in real-world attacks,…

CVE-2026-20805: Microsoft Fixes Actively Exploited Windows Desktop Manager Zero-Day

As 2026 gets underway, the pace of critical vulnerability disclosures shows little sign of easing. Following the recent MongoBleed (CVE-2025-14847) revelation, Microsoft has kicked off the year with its first Patch Tuesday release, addressing 114 security flaws across its product ecosystem. Among them is a zero-day vulnerability that was already being exploited in real-world attacks,…