firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

Flaws in Adobe Commerce and Magento

Adobe has identified a vulnerability in Adobe Commerce and Magento. The vulnerability lies in the template engine of Adobe Commerce, where certain special elements are not properly neutralized. As a result, an attacker can execute arbitrary code remotely, without requiring user interaction. This...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

[SECURITY] Fedora 44 Update: corosync-3.1.10-6.fc44

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

[SECURITY] Fedora 43 Update: chromium-152.0.7977.82-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2026-87150

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authenticated user with readWrite privileges can crash the mongod server process. This occurs when a custom WiredTiger storage configuration option is specified with an incompatible value...

PT-2026-90531

Уязвимость модуля защиты от вредоносных программ Microsoft Malware Protection Engine средства антивирусной защиты Microsoft Defender связана с некорректным определением символических ссылок перед доступом к файлу. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный...

CVE-2026-86083: Improper Control of Generation of Code

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace...

PT-2026-88664

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to read memory inside the sandbox by inducing the browser to proces...

PT-2026-87164

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description Insufficient validation of storage engine configuration options allows an authenticated user with write privileges to provide crafted parameters during collection creation. This action...

PT-2026-88499

Impact Two stages of expression code generation built source text by calling the global JSON.stringify at generation time: the compiler when printing synthetic string literals, and the isolate bridge when interpolating a timezone value into its per-evaluation wrapper. An expression that replaced...

VulnCheck KEV: CVE-2026-87491

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

CVE-2026-82065: Reachable Assertion

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

PT-2026-87155

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An authenticated user with elevated internal privileges can bypass a disabled feature gate in the applyOps command by providing an internal replication mode value not intended for clie...

CVE-2026-82062: Incorrect Authorization

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

PT-2026-88725

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension. Use...

PT-2026-88687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...

PT-2026-88701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a special...

PT-2026-88757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker who has compromised the renderer process to read memory inside the sandbox by using a crafted HTML page. Use after free is a memory...