Windows Paint CVE-2026-83844: Check Your Version and Update
Microsoft fixed Windows Paint CVE-2026-83844 in version 11.2609.401.0 through the Microsoft Store. Here is how to check your version and force the update.
Security patches
-
-
Zyxel GS1900 CVE-2026-107441: Check and Patch Your Switch
Zyxel GS1900 switches on the June patch are still exploitable via CVE-2026-107441. Get the fixed firmware for all 10 models and update safely.
-
Xen XSA-523: Patch XCP-ng and Qubes for the VM Escape Bug
Xen XSA-523 lets a malicious VM read and write other VMs’ memory. See fixed versions for XCP-ng 8.3, Qubes 4.3 and Debian, and how to patch and reboot.
-
WordPress CVE-2026-119977: Check Your Version and Logs
WordPress CVE-2026-119977 is on CISA’s exploited list. See which versions are fixed, block wp-content/upgrade and check your logs for signs of abuse.
-
Windows 11 26H2 Known Issues: Is It Safe to Update Now?
Four of the five Windows 11 26H2 known issues are fixed. Here is the status of each, who should still wait, and how to install 26H2.
-
Chrome 157 Update: 7 Critical Fixes and How to Install It
The Chrome 157 update fixes 213 security bugs, 7 of them critical. See what changed and how to install it on Windows, Mac, Linux and Android today.
-
TeamViewer Vulnerability: How to Update to Version 15.83
CVE-2026-111585 lets a malicious host attack the TeamViewer user who connects to it. Here’s how to check your version and update.
-
Better Auth 1.7.16 Security Update: 12 Fixes and How to Upgrade
Better Auth 1.7.16 fixes 12 security flaws, including a critical Expo plugin bug that allows account takeover. Check if you’re affected and upgrade safely.
-
Next.js Security Update: What the November 2026 Fixes Mean
The Next.js security update of Nov 3, 2026 fixes 7 flaws in 16.4.5 and 15.5.29. See which apps are exposed, how to upgrade, and what to check after.
-
Langflow 1.13.0 Update: Fix the Critical Auth Bypass and RCE Flaws
Langflow 1.13.0 fixes two critical flaws, CVE-2026-93680 and CVE-2026-110186, that let an attacker with no account bypass authentication and run code on the server. Every Langflow…
