CWE-787: news, advisories and analysis

Latest coverage

• Microsoft

  Threats·Cloud & SaaSCritical

  Azure Kubernetes Service Cilium eBPF Verifier Flaw Allows Pod-to-Host Kernel Container Escape

  Microsoft MSRC releases critical patch for CVE-2026-47182 in Azure Kubernetes Service, resolving an eBPF verifier flaw in Cilium enabling pod escape to host kernel.

  Aisha Noor7 Oct 20268 min read
• Deep Dive

  Insights·Cloud & SaaS

  The Edge Appliance Vulnerability Treadmill: Why Network Gateways Remain Stuck in the C/C++ Memory Crisis

  Continuous zero-days in Citrix, Fortinet, and enterprise gateways demonstrate that reactive patching is failing. Only hardware MTE and Rust re-architectures offer an exit.

  Mei-Lin Chen6 Oct 20268 min read
• Apple

  Threats·Cloud & SaaSExploited

  Apple Patches CoreGraphics In-The-Wild Zero-Day Memory Corruption Across iOS and macOS (CVE-2026-86950)

  Apple resolves a critical out-of-bounds write zero-day in CoreGraphics (CVE-2026-86950) exploited in targeted cyber-espionage attacks against iOS and macOS.

  CST Editorial Desk29 Sep 20268 min read
• AWS Cloud

  Threats·Cloud & SaaSHigh

  AWS SDK for C++ Base64 Decoder Memory Flaws Trigger Process Crashes CVE-2026-19642

  An out-of-bounds write defect in the AWS SDK for C++ Base64 decoder allows crafted inputs to corrupt heap memory and terminate cloud client processes.

  Aisha Noor27 Sep 20268 min read
• OT / SCADA

  Threats·Industrial & OTCritical

  lwIP MQTT Client Overflow Enables Remote Code Execution on Industrial IoT Devices

  CISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.

  CST Editorial Desk24 Sep 202616 min read