Linux Distros Unpatched Vulnerability : CVE-2026-84124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbi...

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge web browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass the sandbox protection mechanism by using a specially created HTML page...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge web browsers allows attackers to expose protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From version 1.9.0 until...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to bypass security measures.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to escape from the sandbox environment by using a specially created HTML page...

RockyLinux 8 : wget (RLSA-2026:62144)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62144 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to...

Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84348

CVE-2026-84348 is an information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 (Linux) and 152.0.7977.75/.76 (Windows/Mac). A remote attacker can potentially leak sensitive information via a crafted HTML page . Chromium rates this as Medium severity; CVSS 3.1 base score is 6.5 (AV:...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84332

CVE-2026-84332 is an incorrect authorization flaw in the SiteSettings component of Google Chrome prior to 152.0.7977.75 . A remote attacker can bypass system access restrictions by delivering a crafted HTML page to the victim, requiring user interaction. The CVSS v3.1 score is 6.5 (Medium) with a...

CVE-2026-84326

CVE-2026-84326 is a High-severity uninitialized resource vulnerability in the V8 JavaScript engine of Google Chrome, fixed in version 152.0.7977.75 . A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The CVSS 3.1 score is 8.8 (AV:N/...

CVE-2026-84333

CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

CVE-2026-84347 is a use after free vulnerability in the WebRTC component of Google Chrome prior to 152.0.7977.75 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The vulnerability carries a CVSS 3.1 score of 8.8 (High) with user inte...

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...