<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Patch Sonar: Phones &amp; computers</title>
    <link>https://patchsonar.com/tech/devices</link>
    <description>Exploited vulnerabilities in phones &amp; computers, in plain English.</description>
    <language>en-us</language>
    <atom:link href="https://patchsonar.com/feeds/devices.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>Zero-day: Windows: A Windows flaw lets booby-trapped files skip the “Are you sure?” warning</title>
      <link>https://patchsonar.com/cve/CVE-2026-96951</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-96951</guid>
      <pubDate>Tue, 13 Oct 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. Attackers send a crafted file by email or chat. It only works if someone opens it. What to do: Open Settings, go to Windows Update, select Check for updates, then install and restart. October was also the last update for Windows 11 24H2 Home and Pro, so upgrade if you're on that version.</description>
    </item>
    <item>
      <title>Zero-day: iPhone, iPad &amp; Mac: Apple fixes a flaw used in targeted attacks on iPhones and Macs</title>
      <link>https://patchsonar.com/cve/CVE-2026-86950</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-86950</guid>
      <pubDate>Tue, 29 Sep 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes, in targeted attacks on specific people. Opening a malicious file can let an attacker run code on the device. What to do: On iPhone or iPad: Settings, General, Software Update. On Mac: System Settings, General, Software Update. Until you've updated, don't open unexpected files from strangers.</description>
    </item>
    <item>
      <title>Zero-day: Google Pixel: Google Pixel Improper Authorization Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-58704</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-58704</guid>
      <pubDate>Wed, 16 Sep 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 16, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
    <item>
      <title>Zero-day: Microsoft Windows: Microsoft Windows Heap-Based Buffer Overflow Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-85880</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-85880</guid>
      <pubDate>Tue, 08 Sep 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
    <item>
      <title>Zero-day: Microsoft Windows: Microsoft Windows Link Following Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-81963</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-81963</guid>
      <pubDate>Tue, 08 Sep 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
    <item>
      <title>Apple macOS: Apple macOS Improper Authentication Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-65400</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-65400</guid>
      <pubDate>Tue, 18 Aug 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
    <item>
      <title>Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-33824</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-33824</guid>
      <pubDate>Tue, 18 Aug 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
    <item>
      <title>Zero-day: Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-68820</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-68820</guid>
      <pubDate>Tue, 11 Aug 2026 12:00:00 GMT</pubDate>
      <category>Phones &amp; computers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 11, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
  </channel>
</rss>
