Exploits and vulnerabilities in Q2 2026

Q2 2026 saw an unprecedented rise in CVE disclosures—largely attributed to AI-assisted discovery—and an increase in early public releases of functional exploits that have been actively used by attackers and APTs; notable items include multiple critical Linux kernel privilege-escalation flaws (the Dirty Frag family) affecting cloud/container environments, several Windows Defender/WinRAR exploits, and numerous AI/LLM tool vulnerabilities that undermine access controls and isolation.