Daily curated vulnerability bulletins from ARETIQ AI. Each bulletin highlights the day’s most critical vulnerabilities, ranked by real-world risk — not just CVSS scores.
Ranked by AAS (ARETIQ Adjusted Score) — a real-world risk score that considers exploit maturity, deployment scale, asset criticality, and remediation status.
Subscribe via JSON feed.
22 vulnerabilities across 15 products scored HIGH or above on May 22, 2026. CRITICAL: 5 HIGH: 17 [CRITICAL] linux/linux_kernel 1 CVE | CVSS 9.2 | AAS 12.0 The Linux kernel contains a critical vulnerability (CVE-2026-9054, CVSS 9.2) that triggers a kernel panic when systems receive TCP, IL, RUDP, or GRE packets with header lengths shorter than expected. This affects all vulnerable kernel versions and can be exploited remotely by unauthenticated attackers. System administrators should apply available kernel patches from their distribution vendor immediately. ...
30 vulnerabilities across 15 products scored HIGH or above on May 21, 2026. CRITICAL: 10 HIGH: 20 [CRITICAL] google/chrome 10 CVEs | CVSS 8.8 | AAS 10.0 Google Chrome versions prior to 148.0.7778.179 contain 10 vulnerabilities, including multiple use-after-free flaws in WebRTC that could allow remote code execution with a maximum CVSS score of 8.8. All organizations running Chrome should apply updates immediately, as these are critical-severity issues requiring urgent patching. Refer to the vendor advisory for complete CVE details and platform-specific update instructions. ...