Cyber Security News, MITRE ATT&CK Tactics & Techniques, Vulnerabilities Management, Cyber Kill Chain, Ransomware Attacks, CyberSecurity Alerts & Threat Advisories, IT Security, End Point Security, Security Updates

EasyDiscuss Joomla Component Exposed: Stored XSS Vulnerabilities Allow Malicious Script Execution Across User Sessions

Vulnerabilities

AegironJanuary 17, 2026January 17, 20268 mins0

Product: EasyDiscuss (Joomla discussion/forum component)Vendor: StackIdeasAffected Area: User profile avatar text handling and forum post renderingImpact: Stored…

Critical Windows Security Vulnerabilities: LSASS Remote Code Execution and VBS Enclave Privilege Escalation (CVE-2026-20854 & CVE-2026-20876)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20269 mins0

CVE-2026-20854 affects the Windows Local Security Authority Subsystem Service (LSASS), a critical process responsible for handling user…

Critical Windows Kernel Privilege Escalation via Graphics Component Use-After-Free (CVE-2026-20822)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20267 mins0

Product Name: Microsoft WindowsAffected Component: Windows Graphics Component (Microsoft Graphics Kernel Subsystem)Vulnerability Type: Elevation of Privilege (Use-After-Free)Attack…

Critical Microsoft Office Remote Code Execution Vulnerabilities in Word and Excel (CVE-2026-20944, CVE-2026-20955, CVE-2026-20957)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20268 mins0

CVE-2026-20944, CVE-2026-20955, and CVE-2026-20957 are critical remote code execution vulnerabilities affecting Microsoft Word and Microsoft Excel, posing…