Ubuntu, WordPress, Adobe critical flaws under active exploitation; CISA KEV adds four CVEs

Executive Summary: A high-priority briefing detailing multiple actively exploited and recently disclosed vulnerabilities—Ubuntu snap-confine local privilege escalation (CVE-2026-8933), an Adobe Acrobat Chrome extension chain enabling silent WhatsApp Web data exfiltration, and an actively exploited Windmill path traversal (CVE-2026-29059)—plus CISA KEV additions for chained WordPress flaws and urgent remediation timelines; the briefing emphasizes immediate patching, audit actions, and compliance tracking.