[CVE-2026-50458]

September 15, 2026

• CVE-2026-50458 gets a root-cause analysis of a use-after-free in the Windows Brokering File System. Rotcee documents the finding, with no active exploitation reported. · Exploitation & Vulnerability Research

in Scope Questions Recast Anthropic’s “Rogue Agent” Incidents

July 23, 2026

• Fraggap (CVE-2026-53362) — a 15-byte out-of-bounds write in the Linux UDPv6 corking path (qwerty.or.kr); plus a UAF write-up in the Windows Brokering File System (CVE-2026-50458) (rotcee). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident