importantSYS.SOURCE: GitHub• 2026-08-06T16:24:36Z

KVM/x86 Guest-to-Host Escape Vulnerability (CVE-2026-64561)

#vulnerability #kvm #security #exploit

Zapscape (CVE-2026-64561) is a use-after-free vulnerability in KVM/x86's shadow MMU emulation that enables guest-to-host escape with root privileges. The proof-of-concept demonstrates exploitation via QEMU TCG, creating a root-owned file on the host system.

Read original article

*** END OF TRANSMISSION ***

> GOOGLE IDENTIFIES VISHING CAMPAIGNS TARGETING FINANCIAL FIRMS FOR DATA THEFT AND RANSOM > CHINA-LINKED LIGHTSPY SPYWARE EXPANDS TO 13 COUNTRIES, INCLUDING THE US > DEFENSE TECH STARTUP HADRIAN SECURES $1.37 BILLION IN FUNDING AT $8 BILLION VALUATION > QWEN3.8 MAX ACHIEVES TOP RANKING IN AGENTIC INDEX EVALUATION > UNIONIZATION EFFORTS AMONG UNIVERSITY OF CALIFORNIA TECH WORKERS HIGHLIGHT LABOR RIGHTS AND INDUSTRY CHALLENGES > SMARTPHONE MOTION DETECTION MISCLASSIFIES RUNNING AS THEFT ATTEMPT > FCC ELIMINATES BROADCAST TV OWNERSHIP CAP, PAVES WAY FOR MEDIA CONSOLIDATION > CRITICAL KVM VULNERABILITY (CVE-2026-64561) ENABLES L1 GUEST CODE ESCAPE TO LINUX HOSTS > FORD'S FATHOM EV PICKUP FALLS SHORT OF REPLACING THE TAURUS LEGACY > BUMBLE EXPLORES SWIPE-FREE INTERACTION MODELS AND IN-PERSON MEETUPS TO REVITALIZE USER ENGAGEMENT> GOOGLE IDENTIFIES VISHING CAMPAIGNS TARGETING FINANCIAL FIRMS FOR DATA THEFT AND RANSOM > CHINA-LINKED LIGHTSPY SPYWARE EXPANDS TO 13 COUNTRIES, INCLUDING THE US > DEFENSE TECH STARTUP HADRIAN SECURES $1.37 BILLION IN FUNDING AT $8 BILLION VALUATION > QWEN3.8 MAX ACHIEVES TOP RANKING IN AGENTIC INDEX EVALUATION > UNIONIZATION EFFORTS AMONG UNIVERSITY OF CALIFORNIA TECH WORKERS HIGHLIGHT LABOR RIGHTS AND INDUSTRY CHALLENGES > SMARTPHONE MOTION DETECTION MISCLASSIFIES RUNNING AS THEFT ATTEMPT > FCC ELIMINATES BROADCAST TV OWNERSHIP CAP, PAVES WAY FOR MEDIA CONSOLIDATION > CRITICAL KVM VULNERABILITY (CVE-2026-64561) ENABLES L1 GUEST CODE ESCAPE TO LINUX HOSTS > FORD'S FATHOM EV PICKUP FALLS SHORT OF REPLACING THE TAURUS LEGACY > BUMBLE EXPLORES SWIPE-FREE INTERACTION MODELS AND IN-PERSON MEETUPS TO REVITALIZE USER ENGAGEMENT