{"vulnerability": "cve-2026-2108", "sightings": [{"uuid": "cdbe8fc3-ee45-457a-9aa8-be89cd496bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21085", "type": "seen", "source": "https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355", "content": "On September 9, 2026, Microsoft released a record-breaking Patch Tuesday update addressing 972\u2013974 vulnerabilities, including 113 critical flaws and two actively exploited zero-days across Windows, Office, and SQL. The digest also highlights several high-severity CVEs: a CVSS 10.0 pre-auth RCE in N-able N-central (CVE-2026-86218) added to CISA\u2019s KEV catalog with a federal patch deadline of Sept 11; an authenticated RCE in the WordPress FireBox plugin (CVE-2026-76801); and a high-severity out-of-bounds write in Android\u2019s Keymaster trustlet (CVE-2026-21085). Finally, the update covers emerging AI cybersecurity trends, featuring Alovia\u2014a new security layer for AI-driven platforms\u2014and ongoing industry discussions on the escalating AI arms race and agentic AI applications for both attackers and defenders.", "creation_timestamp": "2026-09-09T08:11:50.566746Z"}, {"uuid": "45b3735c-48fe-42b0-9d90-a5e38022ba8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21087", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvdwp2mc572j", "content": "\ud83d\udccc CVE-2026-21087 - Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege. https://www.cyberhub.blog/cves/CVE-2026-21087", "creation_timestamp": "2026-09-12T20:37:07.093791Z"}, {"uuid": "acb565f1-7815-43d6-9c44-439e85667f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21085", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvekss473z24", "content": "\ud83d\udccc CVE-2026-21085 - Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. https://www.cyberhub.blog/cves/CVE-2026-21085", "creation_timestamp": "2026-09-13T02:37:07.421828Z"}]}