Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

The Hacker News · Thursday, 15 October 2026 at 20:24 (3h ago) · Original article ↗

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.

The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Targeted ads delivered 0-click exploits to install mercenary malware

The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.

Ars Technica 2h ago

Security

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

BleepingComputer 3h ago

Security

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit

They tried to sound the alarm in August

The Register 4h ago

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

More Security & Privacy

Targeted ads delivered 0-click exploits to install mercenary malware

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit