PT-2026-81699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the PDF component, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted PDF file. Use after free is ...

PT-2026-81841

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in Forms allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81527

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the StorageAccessAPI, which allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-81714

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the GetUserMedia function allows a remote attacker to obtain sensitive information through a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-81595

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Compositing component. This occurs when memory is accessed after it has been freed, which can be triggered by a remote attacker using a specially...

The vulnerability of the Loopback microprogramming system authentication mechanism in Dahua devices allows attackers to escalate their privileges.

The vulnerability of the Loopback microprogramming system authentication mechanism of Dahua devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges...

PT-2026-81899

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Description An authentication bypass issue exists in the DPoPProofJwtDecoderFactory due to a cache-based replay attack. Th...

ALSA-2026:59379 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...

The vulnerability of the DecodeQ931() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DecodeQ931 function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise th...

The vulnerability of the ctnetlink_exp_dump_expect() function in the net/netfilter/nf_conntrack_netlink.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ctnetlinkexpdumpexpect function in the net/netfilter/nfconntracknetlink.c module of the netfilter component of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the sip_help_tcp() function in the net/netfilter/nf_conntrack_sip.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siphelptcp function in the net/netfilter/nfconntracksip.c module of the netfilter component of the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to compromise the...

RHEL 10 : pam (RHSA-2026:59379)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59379 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

Linux Distros Unpatched Vulnerability : CVE-2026-78147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of...

Oracle Linux 9 : sqlite (ELSA-2026-58936)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58936 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

PT-2026-81535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in ANGLE, a compatibility layer that translates OpenGL calls to other graphics APIs. This flaw allows a remote attacker to potentially execute arbitrary co...

PT-2026-81892

Name of the Vulnerable Software and Affected Versions code-projects Simple Inventory System version 1.0 Description An issue exists in the /InventoryManagement/edit.php endpoint where the manipulation of the ID argument allows for SQL injection. This allows a remote attacker to interfere with the...

PT-2026-81558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Select component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fr...

PT-2026-81840

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in CustomTabs allows a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. A sandbox is a security mechanis...

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-81893

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647 B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible ...