CVE-2026-7357

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497047552...

CVE-2026-7352

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499023054...

CVE-2026-7349

An use after free flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500034684...

CVE-2026-7347

An use after free flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501722605...

CVE-2026-7345

An insufficient validation of untrusted input flaw was found in the Feedback component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502248774...

CVE-2026-7343

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503645680...

CVE-2026-7341

An use after free flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504586599...

CVE-2026-7338

An use after free flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502449857...

CVE-2026-7337

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500880819...

CVE-2026-7335

An use after free flaw was found in the media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500387779...

Linux Distros Unpatched Vulnerability : CVE-2026-31564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvmeiointcregsaccess In function...

FreeBSD : Mozilla -- Memory safety bugs (6c9ca7e3-430a-11f1-a627-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6c9ca7e3-430a-11f1-a627-b42e991fc52e advisory. https://bugzilla.mozilla.org/buglist.cgi?bugid=1935995%2C1999158%2C2015952%2C2021909%2C2022026%2C202204...

The vulnerability of the cifs_crypto_secmech_release() function in the fs/smb/client/cifsencrypt.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 3: libpng12 (TSSA-2026:0255)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0255 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the reuse of an easy handle in HTTP requests when a custom Host: header is set for the initial request and omitted in a subsequent one. An attacker can obtain cookies intended for a different host by exploiti...

TencentOS Server 2: ImageMagick (TSSA-2026:0256)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0256 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _rtl8812ae PhySetTxPowerLimit() function in the drivers/net/wireless/realtek/rtlwifi/rtl8821ae/phy.c file of the Realtek wireless driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl8812ae PhySetTxPowerLimit function in the drivers/net/wireless/realtek/rtlwifi/rtl8821ae/phy.c file of the Realtek wireless driver for the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an...

Google Chrome < 147.0.7727.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 147.0.7727.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202604stable-channel-update-for-desktop28 advisory. - Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0)

The version of AHV installed on the remote host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0 advisory. - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in...