BIT-NEO4J-ENTERPRISE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2026-80579

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelist when userspace passes FBACTIVATEINVMODE through FBIOPUTVSCREENINFO. The code checks that the mode being deleted is not the current...

CVE-2026-80539

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

CVE-2026-80532

In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list pointers based on what it finds on disk and in memory before we move ...

CVE-2026-80533

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...

CVE-2026-80520

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-79071

A flaw was found in Google Chrome's GPU component. A race condition in the GPU could allow a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation is achieved by enticing a user to visi...

CVE-2026-79072

A flaw was found in Google Chrome. A remote attacker could exploit improper state validation in the Performance component by crafting a malicious HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure...

CVE-2026-79066

A flaw was found in Google Chrome. This improper input validation vulnerability in the Navigation component allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This can be achieved by crafting a malicious HTML page, potentially leading to...

CVE-2026-79065

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79047

A flaw was found in chromium-browser. A remote attacker could leverage social engineering to entice a user to visit a crafted HTML page. This could lead to a use-after-free vulnerability in the Views component, allowing the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79067

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows them to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-79049

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Passwords component, allows a remote attacker to bypass system access restrictions by providing a specially crafted file. This could lead to unauthorized access to sensitive system resources...

CVE-2026-79051

A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79013

A flaw was found in Google Chrome. Improper input validation in the Sync component allowed a remote attacker to obtain sensitive information. This could be achieved by sending specially crafted network traffic to a vulnerable system...

CVE-2026-79010

A flaw was found in Google Chrome's Network component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by performing an operation on a resource after it had expired or been released. This could be triggered via a crafted HTML page, allowing th...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78945

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component could allow a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to potenti...