Live · 98 sources · updated 8m ago

· 22:39 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

400 matching records, 2 with confirmed exploitation.

  1. 67
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

    Exploited CVE-2026-111357CVE-2026-118527 Ivanti Edge / VPN / firewall
  2. 58
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability…

    Exploited CVE-2026-119977 Web platform
  3. 56
    Advisory Fortinet PSIRT

    Linux kernel RCE CVE-2026-98432

    CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can…

    CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel Operating system
  4. 47
    Ubuntu notice Ubuntu

    HAProxy regression

    USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests. This update fixes the problem. We apologize for the inconvenience. Original advisory…

    CVE-2026-110353CVE-2026-110354 Canonical Operating system
  5. 46
    Ubuntu notice Ubuntu

    nginx vulnerabilities

    USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and…

    CVE-2026-42533CVE-2026-15176CVE-2026-93479+3 more Canonical F5 Web platform
  6. 43
    Cisco advisory Cisco PSIRT

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.…

    Fix available CVE-2026-20241 Cisco Identity
  7. 42
    Advisory MSRC

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
  8. 42
    Advisory MSRC

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
  9. 42
    Advisory MSRC

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
  10. 42
    Advisory MSRC

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
  11. 42
    Advisory MSRC

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
  12. 42
    Advisory MSRC

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
  13. 42
    Advisory MSRC

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
  14. 42
    Advisory MSRC

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
  15. 42
    Advisory MSRC

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
  16. 42
    Advisory MSRC

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
  17. 42
    Advisory MSRC

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
  18. 42
    Advisory MSRC

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
  19. 42
    Advisory MSRC

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
  20. 42
    Advisory MSRC

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
  21. 42
    Advisory MSRC

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
  22. 42
    Advisory MSRC

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
  23. 42
    Advisory MSRC

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
  24. 42
    Advisory MSRC

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
  25. 42
    Advisory MSRC

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
  26. 42
    Advisory MSRC

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
  27. 42
    Advisory MSRC

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
  28. 42
    Advisory MSRC

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
  29. 41
    Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat SAP Operating system
  30. 40
    AWS bulletin AWS

    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

    Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction…

    CVE-2026-119083 Amazon Web Services Developer platform
  31. 39
    Red Hat advisory Red Hat

    Critical: Satellite 6 Client Update

    A security update for Red Hat Satellite Client is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  32. 39
    Red Hat advisory Red Hat

    Critical: OpenJDK 11.0.33 ELS Security Update for Windows Builds

    An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is…

    Fix available Red Hat Oracle Developer platform
  33. 38
    Ubuntu notice Ubuntu

    HAProxy vulnerabilities

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

    CVE-2026-110353CVE-2026-110354 Canonical Edge / VPN / firewall
  34. 38
    Advisory MSRC

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
  35. 38
    Advisory MSRC

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
  36. 38
    Advisory MSRC

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
  37. 38
    Advisory MSRC

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
  38. 38
    Advisory MSRC

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
  39. 38
    Advisory MSRC

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
  40. 38
    Advisory MSRC

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
  41. 38
    Advisory MSRC

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
  42. 38
    Advisory MSRC

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
  43. 38
    Advisory MSRC

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
  44. 38
    Advisory MSRC

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
  45. 38
    Advisory MSRC

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
  46. 38
    Advisory MSRC

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
  47. 38
    Advisory MSRC

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
  48. 38
    Advisory MSRC

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
  49. 38
    Advisory MSRC

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
  50. 38
    Advisory MSRC

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
  51. 38
    Advisory MSRC

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
  52. 38
    Advisory MSRC

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
  53. 38
    Advisory MSRC

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
  54. 38
    Advisory MSRC

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
  55. 38
    Advisory MSRC

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
  56. 38
    Advisory MSRC

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
  57. 38
    Advisory MSRC

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
  58. 38
    Advisory MSRC

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
  59. 38
    Advisory MSRC

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
  60. 38
    Advisory MSRC

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
  61. 38
    Advisory MSRC

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
  62. 38
    Advisory MSRC

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
  63. 38
    Advisory MSRC

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
  64. 38
    Advisory MSRC

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
  65. 38
    Advisory MSRC

    Chromium: CVE-2026-118357 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118357 Microsoft Google Browser
  66. 38
    Advisory MSRC

    Chromium: CVE-2026-118337 Improper access control in Forms

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118337 Microsoft Google Browser
  67. 38
    Advisory MSRC

    Chromium: CVE-2026-118336 Improper input validation in Headless

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118336 Microsoft Google Browser
  68. 38
    Advisory MSRC

    Chromium: CVE-2026-118355 Improper input validation in Command

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118355 Microsoft Google Browser
  69. 38
    Advisory MSRC

    Chromium: CVE-2026-118331 Improper input validation in FileAPI

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118331 Microsoft Google Browser
  70. 38
    Advisory MSRC

    Chromium: CVE-2026-118354 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118354 Microsoft Google Browser
  71. 38
    Advisory MSRC

    Chromium: CVE-2026-118333 Missing authorization in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118333 Microsoft Google Browser
  72. 38
    Advisory MSRC

    Chromium: CVE-2026-118332 Improper input validation in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118332 Microsoft Google Browser
  73. 37
    Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

    CVE-2026-121156CVE-2026-121229CVE-2026-121246+57 more Google Browser
  74. 37
    Ubuntu notice Ubuntu

    Bind vulnerabilities

    It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

    CVE-2026-75029CVE-2026-19662CVE-2026-19668+15 more Canonical Operating system
  75. 37
    Red Hat advisory Red Hat

    Important: RHEL AI 3.4 RPM runtime CVE fix - thrift

    Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-43871 - CVE-2026-55969

    CVE-2026-43871CVE-2026-55969 Red Hat Operating system
  76. 37
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management…

    CVE-2026-100070CVE-2026-100071CVE-2026-100072+57 more Canonical Linux kernel Operating system
  77. 36
    Advisory MSRC

    Chromium CVE-2026-118314: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118314 Microsoft Google Browser
  78. 36
    Advisory MSRC

    Chromium CVE-2026-118309: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118309 Microsoft Google Browser
  79. 36
    Cisco advisory Cisco PSIRT

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated…

    Fix available CVE-2026-76419 Cisco Collaboration
  80. 34
    Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated…

    Red Hat Operating system
  81. 34
    Red Hat advisory Red Hat

    Critical: webkit2gtk3 security, bug fix, and enhancement update

    An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system
  82. 34
    Red Hat advisory Red Hat

    Important: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 security update

    An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat SAP Operating system
  83. 34
    Red Hat advisory Red Hat

    Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

    An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  84. 34
    Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  85. 34
    Red Hat advisory Red Hat

    Critical: webkit2gtk3 security, bug fix, and enhancement update

    An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated…

    Red Hat Operating system
  86. 34
    Red Hat advisory Red Hat

    Important: Java 11 OpenJDK ELS Security Update

    An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9.

    Red Hat Oracle Developer platform
  87. 34
    Red Hat advisory Red Hat

    Important: python36:3.6 security update

    An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security…

    Red Hat Operating system
  88. 34
    Red Hat advisory Red Hat

    Important: python36:3.6 security update

    An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security…

    Red Hat Operating system
  89. 34
    Red Hat advisory Red Hat

    Important: python36:3.6 security update

    An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this…

    Red Hat SAP Operating system
  90. 34
    Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  91. 34
    Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  92. 34
    Red Hat advisory Red Hat

    Important: flatpak security update

    An update for flatpak is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  93. 34
    Red Hat advisory Red Hat

    Moderate: cockpit-files security update

    An update for cockpit-files is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  94. 34
    Red Hat advisory Red Hat

    Important: rsyslog security update

    An update for rsyslog is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  95. 34
    Red Hat advisory Red Hat

    Important: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  96. 34
    Ubuntu notice Ubuntu

    FRR regression

    USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop processing RPKI updates after the first one, so routes were not revalidated when RPKI…

    CVE-2024-55553CVE-2024-44070 Canonical Operating system
  97. 34
    Red Hat advisory Red Hat

    Important: delve security update

    An update for delve is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  98. 34
    Red Hat advisory Red Hat

    Critical: webkit2gtk3 security, bug fix, and enhancement update

    An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System…

    Red Hat Operating system
  99. 34
    Red Hat advisory Red Hat

    Important: ruby:2.5 security update

    An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this…

    Red Hat SAP Operating system
  100. 34
    Red Hat advisory Red Hat

    Important: postgresql16-pgvector security update

    An update for postgresql16-pgvector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat Operating system

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help