CVE-2026-66066

Possible arbitrary file read and remote code execution in Active Storage variant processing...

CVE-2026-58216

An authenticated user could possibly crash a KDC process...

CVE-2026-58222

Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes...

CVE-2026-58218

DNS signing DoS via TKEY name cache exhaustion...

GHSA-XRR7-82JR-V58X vulnerabilities

Vulnerabilities for packages: nghttp2...

CVE-2026-58055 vulnerabilities

Vulnerabilities for packages: nghttp2...

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesyst...

CVE-2026-56847

A flaw in Node.js Permission Model enforcement allows traceevents.cr...

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

CVE-2026-56850

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-ar...

CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS sess...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulner...

CVE-2026-16529

A signed integer overflow in the PCP pmGetPDU function can be expl...

CVE-2026-16524

A command injection flaw in PCP's linuxsockets PMDA allows malicious...

CVE-2026-18015

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17969

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17699

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2026-17689

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17687

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...