Windows
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
End of support
- Windows Server 2016: extended support ends 12 January 2027 (vendor)
Security timeline
- Vulnerability reported by Cyber Security NewsTightVNC Viewer flaw allows pre-authentication code execution on Windows, PoC published
- Malware reported by GBHackersNetamLoader malware hidden in Windows update files targets Asian governments
- Vulnerability reported by Cyber Security NewsAnthropic says its AI model built a working root exploit for critical Linux kernel flaw CVE-2026-98432
Recent news
TightVNC Viewer flaw allows pre-authentication code execution on Windows, PoC published
A pre-authentication remote code execution flaw in TightVNC Viewer, demonstrated against 2.8.88 x64, lets a malicious VNC server corrupt the viewer's memory via an integer overflow in screen size handling. Exploitation requires either network access to a viewer in Listening Mode (TCP 5500, no password or IP restriction) or a user connecting to an attacker-controlled server. Researchers credited to SeongJoon Cho of SSD Labs Korea have released a PoC, and the vendor says versions 2.8.89 and 2.8.90 address viewer issues, with 2.8.90 recommended for that branch.
NetamLoader malware hidden in Windows update files targets Asian governments
Kaspersky researchers have identified NetamLoader, a .NET loading framework built on XAML markup, which appears to be a supply-chain attack on a customised Windows build used only by Asian government bodies. Kaspersky Security Network flagged a .config file that used AppDomainManager injection to load the malware. No known APT group has been linked to the campaign.
Fake GitHub repo tricks AI agents into installing SolanaCry malware
A fake GitHub repository deceives AI coding agents into installing SolanaCry malware. The malware uses NetSupport to give attackers remote access to developers' Windows PCs.
Anthropic says its AI model built a working root exploit for critical Linux kernel flaw CVE-2026-98432
Anthropic says an unreleased Claude research model produced a zero-click exploit for CVE-2026-98432, a use-after-free race condition in the Linux kernel's IPv4 TCP handling that gives unauthenticated root command execution, with a claimed 9.8 CVSS score. Upstream fixes are available in stable branches such as 5.10.272, 5.15.223 and 6.6.159, but distribution fixes are uneven, with Ubuntu and Red Hat Enterprise Linux reportedly lacking patched kernels as of 30 October. Teams should prioritise internet-facing servers, apply vendor kernel updates, reboot, and check whether multipath TCP listeners are needed.