A single WebGPU texture-creation call carrying three innocent-looking properties — a depth/stencil format, a non-power-of-two size, and more than one mip level — is enough to trigger a heap buffer overflow inside Chrome’s GPU process on phones powered by Imagination PowerV…
On August 14, 2026, NIST’s National Vulnerability Database published CVE-2026-73678, an unauthenticated remote code execution vulnerability in MindsDB’s Minds Platform — the desktop AI-agent application the company now ships as MindsHub Cowork. NVD scores it a perfec…
On July 25, 2026, NIST’s National Vulnerability Database published CVE-2026-66012, a missing-authorization vulnerability in SiYuan — the privacy-first, block-level note-taking application with over 45,000 GitHub stars and a large Docker-hosted user base. NVD scores it 10.0…
On June 30, 2026, NIST’s National Vulnerability Database published CVE-2026-58116, a critical remote code execution vulnerability in LLaMA-Factory, the open-source LLM fine-tuning framework that has quietly become a piece of critical infrastructure for the AI industry. Wit…