Live · 98 sources · updated 2m ago

· 21:33 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

398 matching records, 3 with confirmed exploitation.

  1. 80
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This…

    Exploited CVE-2026-19868 SonicWall Edge / VPN / firewall
  2. 56
    Advisory Fortinet PSIRT

    Linux kernel RCE CVE-2026-98432

    CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can…

    CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel Operating system
  3. 54
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability…

    Exploited CVE-2026-119977 Web platform
  4. 47
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of…

    Exploited CVE-2024-27834 Apple
  5. 46
    Ubuntu notice Ubuntu

    Linux kernel (NVIDIA) vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

    CVE-2023-20585CVE-2026-64349CVE-2026-64530+57 more Canonical Linux kernel Operating system
  6. 45
    AWS bulletin AWS

    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems

    Bulletin ID: 2026-172-AWS Publication Date: 11/05/2026 20:00 PM PST Description: An issue in the APT package manager (CVE-2026-109518) affects Ubuntu and Debian operating systems. Under specific conditions, when APT is configured…

    Fix available CVE-2026-109518 Amazon Web Services Canonical Operating system
  7. 43
    Cisco advisory Cisco PSIRT

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.…

    Fix available CVE-2026-20241 Cisco Identity
  8. 42
    Advisory MSRC

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
  9. 42
    Advisory MSRC

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
  10. 42
    Advisory MSRC

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
  11. 42
    Advisory MSRC

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
  12. 42
    Advisory MSRC

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
  13. 42
    Advisory MSRC

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
  14. 42
    Advisory MSRC

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
  15. 42
    Advisory MSRC

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
  16. 42
    Advisory MSRC

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
  17. 42
    Advisory MSRC

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
  18. 42
    Advisory MSRC

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
  19. 42
    Advisory MSRC

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
  20. 42
    Advisory MSRC

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
  21. 42
    Advisory MSRC

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
  22. 42
    Advisory MSRC

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
  23. 42
    Advisory MSRC

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
  24. 42
    Advisory MSRC

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
  25. 42
    Advisory MSRC

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
  26. 42
    Advisory MSRC

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
  27. 42
    Advisory MSRC

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
  28. 42
    Advisory MSRC

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
  29. 42
    Advisory MSRC

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
  30. 41
    Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.8 Images Security Update

    New images are available for Red Hat build of Keycloak 26.6.8 and Red Hat build of Keycloak 26.6.8 Operator, running on OpenShift Container Platform

    Red Hat Developer platform
  31. 41
    Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.4.17 Images Security Update

    New images are available for Red Hat build of Keycloak 26.4.17 and Red Hat build of Keycloak 26.4.17 Operator, running on OpenShift Container Platform

    Red Hat Developer platform
  32. 41
    Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.8 Security Update

    New Red Hat build of Keycloak 26.6.8 packages are available from the Customer Portal

    Red Hat Identity
  33. 41
    Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.4.17 Security Update

    New Red Hat build of Keycloak 26.4.17 packages are available from the Customer Portal

    Red Hat Identity
  34. 40
    AWS bulletin AWS

    CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

    Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling…

    CVE-2026-119923CVE-2026-119924 Amazon Web Services Database
  35. 40
    AWS bulletin AWS

    CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

    Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that…

    CVE-2026-122193 Amazon Web Services Cloud platform
  36. 40
    Ubuntu notice Ubuntu

    Tornado regression

    USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such…

    CVE-2026-103263CVE-2023-54397CVE-2024-14029+3 more Canonical AI infrastructure
  37. 40
    Ubuntu notice Ubuntu

    Linux kernel (NVIDIA Tegra) vulnerabilities

    It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local…

    CVE-2026-81010CVE-2024-40954CVE-2025-38261+57 more Canonical Linux kernel Operating system
  38. 39
    Red Hat advisory Red Hat

    Important: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

    A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base…

    Fix available Red Hat Web platform
  39. 38
    Ubuntu notice Ubuntu

    HAProxy regression

    USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests. This update fixes the problem. We apologize for the inconvenience. Original advisory…

    CVE-2026-110353CVE-2026-110354 Canonical Operating system
  40. 38
    Advisory MSRC

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
  41. 38
    Advisory MSRC

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
  42. 38
    Advisory MSRC

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
  43. 38
    Advisory MSRC

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
  44. 38
    Advisory MSRC

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
  45. 38
    Advisory MSRC

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
  46. 38
    Advisory MSRC

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
  47. 38
    Advisory MSRC

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
  48. 38
    Advisory MSRC

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
  49. 38
    Advisory MSRC

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
  50. 38
    Advisory MSRC

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
  51. 38
    Advisory MSRC

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
  52. 38
    Advisory MSRC

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
  53. 38
    Advisory MSRC

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
  54. 38
    Advisory MSRC

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
  55. 38
    Advisory MSRC

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
  56. 38
    Advisory MSRC

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
  57. 38
    Advisory MSRC

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
  58. 38
    Advisory MSRC

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
  59. 38
    Advisory MSRC

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
  60. 38
    Advisory MSRC

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
  61. 38
    Advisory MSRC

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
  62. 38
    Advisory MSRC

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
  63. 38
    Advisory MSRC

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
  64. 38
    Advisory MSRC

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
  65. 38
    Advisory MSRC

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
  66. 38
    Advisory MSRC

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
  67. 38
    Advisory MSRC

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
  68. 38
    Advisory MSRC

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
  69. 38
    Advisory MSRC

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
  70. 38
    Advisory MSRC

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
  71. 38
    Advisory MSRC

    Chromium: CVE-2026-118357 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118357 Microsoft Google Browser
  72. 38
    Advisory MSRC

    Chromium: CVE-2026-118337 Improper access control in Forms

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118337 Microsoft Google Browser
  73. 38
    Advisory MSRC

    Chromium: CVE-2026-118336 Improper input validation in Headless

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118336 Microsoft Google Browser
  74. 38
    Advisory MSRC

    Chromium: CVE-2026-118355 Improper input validation in Command

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118355 Microsoft Google Browser
  75. 38
    Advisory MSRC

    Chromium: CVE-2026-118331 Improper input validation in FileAPI

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118331 Microsoft Google Browser
  76. 38
    Advisory MSRC

    Chromium: CVE-2026-118354 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118354 Microsoft Google Browser
  77. 38
    Advisory MSRC

    Chromium: CVE-2026-118332 Improper input validation in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118332 Microsoft Google Browser
  78. 37
    Ubuntu notice Ubuntu

    nginx vulnerabilities

    USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and…

    CVE-2026-42533CVE-2026-15176CVE-2026-93479+3 more Canonical F5 Web platform
  79. 36
    Advisory MSRC

    Chromium CVE-2026-118314: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118314 Microsoft Google Browser
  80. 36
    Advisory MSRC

    Chromium CVE-2026-118309: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118309 Microsoft Google Browser
  81. 36
    Cisco advisory Cisco PSIRT

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated…

    Fix available CVE-2026-76419 Cisco Collaboration
  82. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat Operating system
  83. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  84. 34
    Red Hat advisory Red Hat

    Important: tesseract security update

    An update for tesseract is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  85. 34
    Red Hat advisory Red Hat

    Important: goose security update

    An update for goose is now available for Red Hat Enterprise Linux 10.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  86. 34
    Red Hat advisory Red Hat

    Important: goose security update

    An update for goose is now available for Red Hat Enterprise Linux 9.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  87. 34
    Chrome release Chrome Releases

    Chrome for Android Update

    Hi, everyone! We've just released Chrome 157 (157.0.8103.46) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the…

    Google Browser
  88. 34
    Red Hat advisory Red Hat

    Moderate: glibc security update

    An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  89. 34
    Ubuntu notice Ubuntu

    HAProxy vulnerabilities

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

    CVE-2026-110353CVE-2026-110354 Canonical Edge / VPN / firewall
  90. 33
    CCCS advisory CCCS

    WordPress security advisory (AV26-1117)

    CVE-2026-119977 Web platform
  91. 33
    Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

    CVE-2026-121156CVE-2026-121229CVE-2026-121246+57 more Google Browser
  92. 33
    Ubuntu notice Ubuntu

    Bind vulnerabilities

    It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

    CVE-2026-75029CVE-2026-19662CVE-2026-19668+15 more Canonical Operating system
  93. 33
    Red Hat advisory Red Hat

    Important: RHEL AI 3.4 RPM runtime CVE fix - thrift

    Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-43871 - CVE-2026-55969

    CVE-2026-43871CVE-2026-55969 Red Hat Operating system
  94. 33
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management…

    CVE-2026-100070CVE-2026-100071CVE-2026-100072+57 more Canonical Linux kernel Operating system
  95. 33
    AWS bulletin AWS

    CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

    CVE-2026-98432 Amazon Web Services Linux kernel Operating system
  96. 32
    Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Mozilla Operating system
  97. 32
    Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat SAP Operating system
  98. 32
    Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  99. 32
    Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  100. 32
    Red Hat advisory Red Hat

    Important: bind9.16 security, bug fix, and enhancement update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help