Live · 98 sources · updated 12m ago

· 12:12 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

441 matching records, 3 with confirmed exploitation.

  1. 73
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound…

    Exploited EPSS 0.27 CVE-2026-97229CVE-2026-76418 Cisco GitLab Edge / VPN / firewall
  2. 67
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

    Exploited CVE-2026-111357CVE-2026-118527 Ivanti Edge / VPN / firewall
  3. 66
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux…

    Exploited EPSS 0.16 CVE-2026-41709CVE-2026-46300 VMware (Broadcom) Linux kernel Operating system
  4. 60
    Advisory Fortinet PSIRT

    Linux kernel RCE CVE-2026-98432

    CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can…

    CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel Operating system
  5. 60
    Cisco advisory Cisco PSIRT

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could…

    EPSS 0.89 Fix available CVE-2026-20127 Cisco Edge / VPN / firewall
  6. 48
    AWS bulletin AWS

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process…

    EPSS 0.83 CVE-2026-111497 Amazon Web Services Cloud platform
  7. 45
    Cisco advisory Cisco PSIRT

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…

    Fix available CVE-2026-76418 Cisco Edge / VPN / firewall
  8. 42
    Advisory MSRC

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
  9. 42
    Advisory MSRC

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
  10. 42
    Advisory MSRC

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
  11. 42
    Advisory MSRC

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
  12. 42
    Advisory MSRC

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
  13. 42
    Advisory MSRC

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
  14. 42
    Advisory MSRC

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
  15. 42
    Advisory MSRC

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
  16. 42
    Advisory MSRC

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
  17. 42
    Advisory MSRC

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
  18. 42
    Advisory MSRC

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
  19. 42
    Advisory MSRC

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
  20. 42
    Advisory MSRC

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
  21. 42
    Advisory MSRC

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
  22. 42
    Advisory MSRC

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
  23. 42
    Advisory MSRC

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
  24. 42
    Advisory MSRC

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
  25. 42
    Advisory MSRC

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
  26. 42
    Advisory MSRC

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
  27. 42
    Advisory MSRC

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
  28. 42
    Advisory MSRC

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
  29. 42
    Advisory MSRC

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
  30. 42
    Advisory MSRC

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
  31. 42
    Advisory MSRC

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
  32. 42
    Advisory MSRC

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
  33. 42
    Advisory MSRC

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
  34. 42
    Advisory MSRC

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
  35. 42
    Advisory MSRC

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
  36. 42
    Advisory MSRC

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
  37. 42
    Advisory MSRC

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
  38. 42
    Advisory MSRC

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
  39. 42
    Advisory MSRC

    Chromium: CVE-2026-118357 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118357 Microsoft Google Browser
  40. 42
    Advisory MSRC

    Chromium: CVE-2026-118337 Improper access control in Forms

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118337 Microsoft Google Browser
  41. 42
    Advisory MSRC

    Chromium: CVE-2026-118336 Improper input validation in Headless

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118336 Microsoft Google Browser
  42. 42
    Advisory MSRC

    Chromium: CVE-2026-118355 Improper input validation in Command

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118355 Microsoft Google Browser
  43. 42
    Advisory MSRC

    Chromium: CVE-2026-118331 Improper input validation in FileAPI

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118331 Microsoft Google Browser
  44. 42
    Advisory MSRC

    Chromium: CVE-2026-118354 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118354 Microsoft Google Browser
  45. 42
    Advisory MSRC

    Chromium: CVE-2026-118333 Missing authorization in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118333 Microsoft Google Browser
  46. 42
    Advisory MSRC

    Chromium: CVE-2026-118332 Improper input validation in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118332 Microsoft Google Browser
  47. 41
    Red Hat advisory Red Hat

    Important: bind9.18 security, bug fix, and enhancement update

    An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  48. 41
    Red Hat advisory Red Hat

    Important: bind9.16 security, bug fix, and enhancement update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  49. 41
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 13.0 security advisory

    Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux (RHEL) 7. Red Hat Product Security has rated this update as having a security impact of Important. A…

    Red Hat Operating system
  50. 41
    Red Hat advisory Red Hat

    Important: bind9.16 security update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  51. 40
    AWS bulletin AWS

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status…

    CVE-2026-116635 Amazon Web Services Anthropic AI infrastructure
  52. 40
    AWS bulletin AWS

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax in SQL identifier…

    CVE-2026-119301 Amazon Web Services Apache Software Foundation Web platform
  53. 39
    Red Hat advisory Red Hat

    Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available

    An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (Red Hat build of Quarkus 3.33.4.SP2). The purpose of this text-only errata is to inform you about the enhancements that improve your…

    Fix available Red Hat Apache Software Foundation Web platform
  54. 39
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  55. 39
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  56. 39
    Red Hat advisory Red Hat

    Important: Red Hat build of Quarkus 3.33.4.SP2 release and security update

    An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Web platform
  57. 39
    Red Hat advisory Red Hat

    Important: Red Hat build of Quarkus 3.27.6.SP2 release and security update

    An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Web platform
  58. 39
    CCCS advisory CCCS

    AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

    EPSS 0.83 CVE-2026-111497 Google
  59. 38
    Cisco advisory Cisco PSIRT

    Vulnerabilities in Node.js Affecting Cisco Products: October 2026

    On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli…

    Fix available CVE-2026-111497CVE-2026-105482CVE-2026-105483+1 more Cisco Node.js Developer platform
  60. 36
    Advisory MSRC

    Chromium CVE-2026-91732: Missing authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-91732 Microsoft Google Browser
  61. 36
    Advisory MSRC

    Chromium: CVE-2026-118315 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118315 Microsoft Google Browser
  62. 36
    Advisory MSRC

    Chromium: CVE-2026-118312 Memory corruption in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118312 Microsoft Google Browser
  63. 36
    Advisory MSRC

    Chromium: CVE-2026-118308 Use after free in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118308 Microsoft Google Browser
  64. 36
    Advisory MSRC

    Chromium: CVE-2026-118319 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118319 Microsoft Google Browser
  65. 36
    Advisory MSRC

    Chromium: CVE-2026-118341 Use after free in Modularization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118341 Microsoft Google Browser
  66. 36
    Advisory MSRC

    Chromium: CVE-2026-118338 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118338 Microsoft Google Browser
  67. 36
    Advisory MSRC

    Chromium: CVE-2026-118335 Improper input validation in Metrics

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118335 Microsoft Google Browser
  68. 36
    Advisory MSRC

    Chromium: CVE-2026-118347 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118347 Microsoft Google Browser
  69. 36
    Advisory MSRC

    Chromium: CVE-2026-118356 Use after free in WTF

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118356 Microsoft Google Browser
  70. 36
    Advisory MSRC

    Chromium: CVE-2026-118330 Use after free in Browser

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118330 Microsoft Google Browser
  71. 35
    CCCS advisory CCCS

    GitLab security advisory (AV26-1028)

    EPSS 0.27 CVE-2026-97229 GitLab Developer platform
  72. 34
    Red Hat advisory Red Hat

    Important: libXtst security update

    An update for libXtst is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  73. 34
    Red Hat advisory Red Hat

    Moderate: pipewire security update

    An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System…

    Red Hat Operating system
  74. 34
    Red Hat advisory Red Hat

    Moderate: gnutls security update

    An update for gnutls is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring…

    Red Hat Operating system
  75. 34
    Red Hat advisory Red Hat

    Critical: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having…

    Red Hat SAP Operating system
  76. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  77. 34
    Red Hat advisory Red Hat

    Critical: kernel security, bug fix, and enhancement update

    An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  78. 34
    Red Hat advisory Red Hat

    Important: Satellite 6 Client Update

    Updated Satellite Client packages that fix several bugs are now available for Red Hat Satellite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Network management
  79. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  80. 34
    Red Hat advisory Red Hat

    Important: ghostscript security update

    An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  81. 34
    Red Hat advisory Red Hat

    Important: gimp security update

    An update for gimp is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  82. 34
    Red Hat advisory Red Hat

    Moderate: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  83. 34
    Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  84. 34
    Red Hat advisory Red Hat

    Moderate: perl:5.32 security update

    An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  85. 34
    Red Hat advisory Red Hat

    Important: python-urllib3 security update

    An update for python-urllib3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  86. 34
    Red Hat advisory Red Hat

    Moderate: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  87. 34
    Red Hat advisory Red Hat

    Important: firefox security update

    An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Mozilla Operating system
  88. 34
    Red Hat advisory Red Hat

    Important: libxml2 security update

    An update for libxml2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  89. 34
    Red Hat advisory Red Hat

    Important: python-jwt security update

    An update for python-jwt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated…

    Red Hat Operating system
  90. 34
    Red Hat advisory Red Hat

    Important: kernel security update

    An update for the kernel is now available for NVIDIA on RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat NVIDIA Operating system
  91. 34
    Red Hat advisory Red Hat

    Important: libsoup security update

    An update for libsoup is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  92. 34
    Red Hat advisory Red Hat

    Important: pki-core:10.6 security update

    An update for the pki-core:10.6 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated…

    Red Hat SAP Operating system
  93. 34
    Red Hat advisory Red Hat

    Important: opentelemetry-collector security update

    An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat Operating system
  94. 34
    Red Hat advisory Red Hat

    Important: kernel-rt bug fix and enhancement update

    An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

    Red Hat Operating system
  95. 34
    Red Hat advisory Red Hat

    Important: flatpak security update

    An update for flatpak is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  96. 34
    Red Hat advisory Red Hat

    Important: wireshark security update

    An update for wireshark is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Wireshark / tcpdump Operating system
  97. 34
    Red Hat advisory Red Hat

    Important: bind security update

    An update for bind is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  98. 34
    MS-ISAC advisory MS-ISAC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall…

    Fix available Cisco Edge / VPN / firewall
  99. 33
    AWS bulletin AWS

    CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

    Bulletin ID: 2026-160-AWS Publication Date: 10/30/2026 22:15 PM PDT Description: AWS is aware of CVE-2026-98432, a memory issue in the Linux kernel IPv4 TCP handshake path affecting kernel versions 4.4 and later that could result…

    CVE-2026-98432 Amazon Web Services Linux kernel Operating system
  100. 33
    GitLab release GitLab

    GitLab Patch Release and Security Update: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14

    We have released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab.com is already running the patched version. GitLab Dedicated tenants…

    CVE-2026-111943 GitLab Developer platform

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help