Remote code execution vulnerabilities dominate this month’s critical Android patches.

The team behind the popular open-source framework Electron warns a remote code execution flaw could compromise user privacy.

A domain name system server implementation is at risk of remote code execution, information exposure and denial-of-service attacks after a seven vulnerability were disclosed by Google and patched by the maintainers of Dnsmasq.

Bluetooth attack vector, dubbed ‘BlueBorne’, leaves billions of smart Bluetooth devices open to attack including Android and Apple phones and millions more Linux-based smart devices.

Google fixed 81 vulnerabilities, including 13 critical remote code execution bugs, in the September edition of its Android Security Bulletin on Tuesday.

Microsoft releases a total of 57 security patches, part of its July Patch Tuesday, with 20 rated critical.

Microsoft patched 95 vulnerabilities today, including two under attack.

Cisco is prepping fixes for two of its products affected by last week’s Samba vulnerability. Netgear has also pushed out a fix for NAS devices that were affected.

Attackers can remotely execute code on targeted systems via specially crafted subtitle files for videos.

Microsoft fixed a bug in Skype last month that could have allowed an attacker to execute code on the system it was running on, phish Skype credentials and crash the application.