HTG Threat Report

Threat Report 8/17/26

Written by Evan Kennedy | Aug 17, 2026, 3:40:34 PM

Google Chrome — Arbitrary Code Execution

Multiple vulnerabilities have been identified in Google Chrome, with the most severe potentially allowing an attacker to execute arbitrary code with the privileges of the logged-in user.

A successful attack could allow a threat actor to:

  • Install malicious programs
  • View, modify, or delete data
  • Create new accounts
  • Potentially gain extensive control when the affected user has administrative privileges

 

Affected Versions
  • Windows & macOS: Chrome versions prior to 151.0.7922.137/.138
  • Linux: Chrome versions prior to 151.0.7922.137

 

Risk

Large & Medium Businesses:  Medium
Small Businesses:  Medium

 

Recommended Action
  • Update Google Chrome immediately on all managed and unmanaged devices.
  • Verify that automatic browser updates are enabled and functioning.
  • Apply the Principle of Least Privilege (PoLP) so users do not operate with administrative permissions unless required.

Reference: Google Chrome Stable Channel Update

 

Microsoft — Critical Security Patches

Microsoft has released security updates addressing multiple vulnerabilities across its product ecosystem, including flaws that could enable remote code execution.

Successful exploitation could allow an attacker to operate with the privileges of the logged-in user—potentially installing programs, accessing or deleting data, and creating accounts with elevated privileges.

 

Affected Products
  • Azure
  • Microsoft Defender
  • Developer Tools
  • Exchange Server
  • Microsoft Office
  • Office 2016
  • SharePoint Server
  • Windows
  • Other Microsoft products

 

Risk

Large & Medium Businesses:  High
Small Businesses:  Medium

 

Recommended Action
  • Prioritize deployment of Microsoft's latest security updates.
  • Review servers, endpoints, and applications for outstanding patches.
  • Limit administrative privileges using the Principle of Least Privilege.
References:
Microsoft Security Update Guide
Microsoft August 2026 Security Updates

 

Adobe — Multiple Arbitrary Code Execution Vulnerabilities

Adobe has disclosed vulnerabilities affecting several enterprise, development, marketing, e-commerce, and creative products. The most severe could allow arbitrary code execution.

Depending on the privileges of the affected account, successful exploitation could enable attackers to install software, access or manipulate data, or create privileged accounts.

 

Key Affected Products

Adobe ColdFusion

  • ColdFusion 2025 — 2025.0.11 and earlier
  • ColdFusion 2023 — 2023.0.22 and earlier

Adobe Commerce / Magento

  • Multiple Adobe Commerce 2.4.x releases through the July 2026 releases
  • Multiple Adobe Commerce B2B 1.x releases through the July 2026 releases
  • Multiple Magento Open Source 2.4.x releases through the July 2026 releases

Adobe Lightroom

  • 15.4 and earlier

Content Credentials

  • Rust SDK c2pa-v0.90.5 and earlier
  • C2PA Tool c2patool-v0.27.5 and earlier
  • Content Credentials JS SDK @contentauth/c2pa-web@0.12.0 and earlier

Adobe Campaign Classic

  • ACC v7 — 7.4.3 build 9399 and earlier

 

Risk

Large & Medium Businesses:  High
Small Businesses: Medium

 

Recommended Action
  • Identify affected Adobe products across your environment.
  • Install Adobe's latest security updates as soon as possible.
  • Prioritize internet-facing and business-critical systems.
  • Restrict administrative access and follow the Principle of Least Privilege.

 

References:
Adobe Security Bulletins
Adobe ColdFusion — APSB26-90
Adobe Commerce / Magento — APSB26-92
Adobe Lightroom — APSB26-94
Content Authenticity SDK — APSB26-111
Adobe Campaign — APSB26-123


 

SonicWall GMS — Remote Code Execution

Multiple vulnerabilities have been discovered in SonicWall Global Management System (GMS), including vulnerabilities that could allow remote code execution.

GMS provides centralized management for SonicWall security infrastructure, making vulnerabilities affecting the platform particularly important to address.

Successful exploitation could allow attackers to execute code using the affected service account's privileges, potentially enabling them to install programs, manipulate data, or create privileged accounts.

 

Affected Systems
  • SonicWall GMS Virtual Appliance & Windows — version 9.5.1 and earlier
  •  
Risk

Large & Medium Businesses:  High
Small Businesses: Medium

 

Recommended Action
  • Update SonicWall GMS to the latest supported release immediately.
  • Review service-account privileges and reduce unnecessary permissions.
  • Apply the Principle of Least Privilege throughout SonicWall management infrastructure.

 

Reference:
 SonicWall Security Advisory — SNWLID-2026-0011

 

Cisco Firewall Vulnerability — Active Exploitation Reported

 

Cisco has issued patches for an actively exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense operating systems, Cybersecurity Dive reports. The flaw, caused by improper error handling during HTTP request processing, allows unauthenticated, remote attackers to crash the firewalls by sending error-riddled requests, leading to denial-of-service.

 

The US Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog and ordered Federal agencies to apply fixes by tomorrow, August 14th.

 

References:
CISA Known Exploited Vulnerabilities Catalog
Cisco Security Advisories

 
View full post