Vulnerability (CVE)
CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds write in the Linux kernel's act_pedit packet-editing action that corrupts shared page-cache memory, and a public working exploit appeared within a day of the CVE's assignment on June 16. The...
This week's recap details DirtyClone (CVE-2026-43503), a new variant of the Dirty Frag Linux kernel flaw that lets local users gain root privileges via cloned packets, working on Debian, Ubuntu, and Fedora with default namespace configurations. JFrog said...
Researchers at Accomplish AI found a sandbox escape in Anthropic's Claude Cowork, codenamed SharedRoot, that let the agent break out of its Linux VM and read or write files anywhere on the host Mac; about 500,000 macOS users running local Cowork sessions...