Live · 98 sources · updated 6m ago

· 15:07 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

471 matching records, 5 with confirmed exploitation.

  1. 73
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound…

    Exploited EPSS 0.27 CVE-2026-97229CVE-2026-76418 Cisco GitLab Edge / VPN / firewall
  2. 71
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

    Exploited CVE-2026-111357CVE-2026-118527 Ivanti Edge / VPN / firewall
  3. 69
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type…

    Exploited EPSS 0.83 CVE-2026-48356CVE-2026-111497 Google Adobe Web platform
  4. 64
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching : CVE-2026-109618 – PHP Memory Corruption…

    Exploited EPSS 1.00 CVE-2026-109618CVE-2026-109619
  5. 60
    Cisco advisory Cisco PSIRT

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could…

    EPSS 0.89 Fix available CVE-2026-20127 Cisco Edge / VPN / firewall
  6. 60
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux…

    Exploited CVE-2026-41709CVE-2026-46300 VMware (Broadcom) Linux kernel Operating system
  7. 51
    Advisory Fortinet PSIRT

    Node2Shell CVEs

    CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js…

    CVSS 9.8 CVE-2026-105482CVE-2026-105483CVE-2026-106069+7 more Fortinet Node.js Developer platform
  8. 48
    AWS bulletin AWS

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process…

    EPSS 0.83 CVE-2026-111497 Amazon Web Services Cloud platform
  9. 45
    Cisco advisory Cisco PSIRT

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…

    Fix available CVE-2026-76418 Cisco Edge / VPN / firewall
  10. 42
    Advisory MSRC

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
  11. 42
    Advisory MSRC

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
  12. 42
    Advisory MSRC

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
  13. 42
    Advisory MSRC

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
  14. 42
    Advisory MSRC

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
  15. 42
    Advisory MSRC

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
  16. 42
    Advisory MSRC

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
  17. 42
    Advisory MSRC

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
  18. 42
    Advisory MSRC

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
  19. 42
    Advisory MSRC

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
  20. 42
    Advisory MSRC

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
  21. 42
    Advisory MSRC

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
  22. 42
    Advisory MSRC

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
  23. 42
    Advisory MSRC

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
  24. 42
    Advisory MSRC

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
  25. 42
    Advisory MSRC

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
  26. 42
    Advisory MSRC

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
  27. 42
    Advisory MSRC

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
  28. 42
    Advisory MSRC

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
  29. 42
    Advisory MSRC

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
  30. 42
    Advisory MSRC

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
  31. 42
    Advisory MSRC

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
  32. 42
    Advisory MSRC

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
  33. 42
    Advisory MSRC

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
  34. 42
    Advisory MSRC

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
  35. 42
    Advisory MSRC

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
  36. 42
    Advisory MSRC

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
  37. 42
    Advisory MSRC

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
  38. 42
    Advisory MSRC

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
  39. 42
    Advisory MSRC

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
  40. 42
    Advisory MSRC

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
  41. 42
    Advisory MSRC

    Chromium: CVE-2026-118357 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118357 Microsoft Google Browser
  42. 42
    Advisory MSRC

    Chromium: CVE-2026-118337 Improper access control in Forms

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118337 Microsoft Google Browser
  43. 42
    Advisory MSRC

    Chromium: CVE-2026-118336 Improper input validation in Headless

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118336 Microsoft Google Browser
  44. 42
    Advisory MSRC

    Chromium: CVE-2026-118355 Improper input validation in Command

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118355 Microsoft Google Browser
  45. 42
    Advisory MSRC

    Chromium: CVE-2026-118331 Improper input validation in FileAPI

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118331 Microsoft Google Browser
  46. 42
    Advisory MSRC

    Chromium: CVE-2026-118354 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118354 Microsoft Google Browser
  47. 42
    Advisory MSRC

    Chromium: CVE-2026-118333 Missing authorization in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118333 Microsoft Google Browser
  48. 42
    Advisory MSRC

    Chromium: CVE-2026-118332 Improper input validation in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118332 Microsoft Google Browser
  49. 42
    Outbreak alert FortiGuard

    Node2Shell Remote Code Execution

    CVE-2026-111497 is an out-of-bounds write vulnerability in Google's Brotli decoder, a component used to decompress data encoded with the Brotli compression algorithm. Brotli is widely used in web communications and is…

    EPSS 0.83 CVE-2026-111497 Google Node.js Developer platform
  50. 39
    Red Hat advisory Red Hat

    Important: java-17-openjdk security update for RHEL 9

    An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, and Red Hat…

    Fix available Red Hat Operating system
  51. 39
    CCCS advisory CCCS

    GitLab security advisory (AV26-1028)

    EPSS 0.27 CVE-2026-97229 GitLab Developer platform
  52. 39
    CCCS advisory CCCS

    AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

    EPSS 0.83 CVE-2026-111497 Google
  53. 39
    CCCS advisory CCCS

    Google security advisory (AV26-1085)

    EPSS 0.83 CVE-2026-111497 Google
  54. 38
    MS-ISAC advisory MS-ISAC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall…

    Fix available Cisco Edge / VPN / firewall
  55. 38
    Cisco advisory Cisco PSIRT

    Vulnerabilities in Node.js Affecting Cisco Products: October 2026

    On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli…

    Fix available CVE-2026-111497CVE-2026-105482CVE-2026-105483+1 more Cisco Node.js Developer platform
  56. 37
    AWS bulletin AWS

    CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

    Bulletin ID: 2026-160-AWS Publication Date: 10/30/2026 22:15 PM PDT Description: AWS is aware of CVE-2026-98432, a memory issue in the Linux kernel IPv4 TCP handshake path affecting kernel versions 4.4 and later that could result…

    CVE-2026-98432 Amazon Web Services Linux kernel Operating system
  57. 37
    Palo Alto advisory Palo Alto PSIRT

    Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)

    EPSS 0.83 CVE-2026-111497 Palo Alto Networks
  58. 36
    Advisory MSRC

    Chromium CVE-2026-91732: Missing authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-91732 Microsoft Google Browser
  59. 36
    Advisory MSRC

    Chromium: CVE-2026-118315 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118315 Microsoft Google Browser
  60. 36
    Advisory MSRC

    Chromium: CVE-2026-118312 Memory corruption in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118312 Microsoft Google Browser
  61. 36
    Advisory MSRC

    Chromium: CVE-2026-118308 Use after free in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118308 Microsoft Google Browser
  62. 36
    Advisory MSRC

    Chromium: CVE-2026-118319 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118319 Microsoft Google Browser
  63. 36
    Advisory MSRC

    Chromium: CVE-2026-118341 Use after free in Modularization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118341 Microsoft Google Browser
  64. 36
    Advisory MSRC

    Chromium: CVE-2026-118338 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118338 Microsoft Google Browser
  65. 36
    Advisory MSRC

    Chromium: CVE-2026-118335 Improper input validation in Metrics

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118335 Microsoft Google Browser
  66. 36
    Advisory MSRC

    Chromium: CVE-2026-118347 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118347 Microsoft Google Browser
  67. 36
    Advisory MSRC

    Chromium: CVE-2026-118356 Use after free in WTF

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118356 Microsoft Google Browser
  68. 36
    Advisory MSRC

    Chromium: CVE-2026-118330 Use after free in Browser

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118330 Microsoft Google Browser
  69. 33
    GitLab release GitLab

    GitLab Patch Release and Security Update: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14

    We have released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition (CE) and Enterprise Edition (EE). We also released version 19.5.1 for GitLab Runner and released versions 18.11.8…

    CVE-2026-111943 GitLab Developer platform
  70. 33
    Chrome release Chrome Releases

    Long Term Support Channel Update for ChromeOS

    A new LTS-150 version 150.0.7871.287 (Platform Version: 16700.68.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 562038679 High CVE-2026-103629 Integer overflow in Skia…

    CVE-2026-103629CVE-2026-110166CVE-2026-113279+57 more Google Operating system
  71. 33
    Ubuntu notice Ubuntu

    nginx vulnerabilities

    It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…

    CVE-2026-15176CVE-2026-93479CVE-2026-95101+2 more Canonical F5 Web platform
  72. 32
    Debian advisory Debian

    nss - security update

    It was discovered that several eMudhra intermediate CA certificates have been compromised. Updated nss packages are provided to remove the "eMudhra emSign Root CA - G3", "eMudhra emSign Root CA - C1" and "emSign ECC Root CA - C3"…

    Debian Operating system
  73. 32
    Red Hat advisory Red Hat

    Important: bind9.18 security update

    An update for bind9.18 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  74. 32
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 17.1 (python-botocore) security update

    An update for python-botocore is now available for Red Hat OpenStack Platform 17.1 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Hypervisor
  75. 32
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 16.2 (python-botocore) security update

    An update for python-botocore is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Hypervisor
  76. 32
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Services on OpenShift 18.0 (python-botocore) security update

    An update for python-botocore is now available for Red Hat OpenStack Services on OpenShift 18.0 (Antelope). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat Developer platform
  77. 32
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 13.0 (python-botocore) security update

    An update for python-botocore is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base…

    Red Hat Hypervisor
  78. 32
    Debian advisory Debian

    thunderbird - security update

    Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure https://security-tracker.debian.org/tracker/DSA-6598-1

    Debian Mozilla Operating system
  79. 32
    Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  80. 31
    AWS bulletin AWS

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the…

    CVE-2026-119117 Amazon Web Services Cloud platform
  81. 31
    Advisory MSRC

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Corrected CVE by adding the assigning CNA. This is an informational change only.

    CVE-2026-69446 Microsoft Browser
  82. 31
    Advisory MSRC

    Visual Studio Spoofing Vulnerability

    Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

    CVE-2026-118147 Microsoft Developer platform
  83. 31
    AWS bulletin AWS

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions, under certain conditions, an…

    CVE-2026-119115 Amazon Web Services Kubernetes Developer platform
  84. 30
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  85. 30
    Red Hat advisory Red Hat

    Important: java-21-openjdk security update for RHEL 8 and 9

    An update for java-21-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, and Red Hat Enterprise Linux 9. Red Hat…

    Fix available Red Hat Operating system
  86. 30
    Red Hat advisory Red Hat

    Important: java-21-openjdk security update for RHEL 10

    An update for java-21-openjdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A…

    Fix available Red Hat Operating system
  87. 30
    Red Hat advisory Red Hat

    Important: Satellite 6.17 security update

    A security update for Red Hat Satellite 6.17 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  88. 30
    Red Hat advisory Red Hat

    Critical: Satellite 6.19 security update

    A security update for Red Hat Satellite is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Network management
  89. 30
    Red Hat advisory Red Hat

    Important: Satellite 6.16 EUS security update

    A security update for Red Hat Satellite is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Network management
  90. 30
    Red Hat advisory Red Hat

    Important: Satellite 6.18 security update

    A security update for Red Hat Satellite 6.18 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  91. 30
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  92. 30
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  93. 30
    CCCS advisory CCCS

    Adobe security advisory (AV26-697)

    EPSS 0.45 CVE-2026-48356 Adobe
  94. 29
    Advisory CERT Polska

    Vulnerabilities in Zimbra Collaboration software

    During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.

    CVE-2026-66911CVE-2026-66912 Zimbra Email
  95. 29
    ICS advisory CISA ICS

    Hitachi Energy CoreTec Product

    Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on…

    CVE-2026-13162CVE-2026-43284 Hitachi Energy OT / ICS
  96. 29
    Advisory CERT Polska

    Vulnerability in Wing FTP Server software

    Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.

    CVE-2026-105420 File transfer
  97. 29
    Advisory CERT Polska

    Vulnerabilities in twofactor_gauthenticator plugin for Roundcube

    CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.

    CVE-2026-107145CVE-2026-107147 Roundcube Email
  98. 28
    CCCS advisory CCCS

    Linux security advisory (AV26-1108)

    CVE-2026-98432
  99. 28
    ICS advisory CISA ICS

    Siemens Mendix SAML Module

    Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens…

    Fix available CVE-2026-89209 Siemens OT / ICS
  100. 28
    ICS advisory CISA ICS

    Hitachi Energy TRO600 series products

    Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and…

    Fix available CVE-2026-10756CVE-2026-106087 Hitachi Energy OT / ICS

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help