PT-2026-89137

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx process function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-71614

The GPAC multimedia framework (version c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 ) contains a vulnerability that allows an attacker to achieve arbitrary code execution . The flaw resides in the src/media_tools/dvb_mpe.c file, specifically within the descriptorTime_slice_fec_identifier() and gf_m2t...

Linux Distros Unpatched Vulnerability : CVE-2026-87636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

CVE-2026-71614: Improper Control of Generation of Code

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

PT-2026-105472

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-239g-whfq-7xj9. This link is maintained to preserve external references. Original Description GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the...

CVE-2026-87817: Improper Control of Generation of Code

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

CVE-2026-87479: Reliance on Untrusted Inputs in a Security Decision

Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

CVE-2026-87457: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-71613

A buffer overflow vulnerability exists in GPAC (version c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 ) due to a failure to check the size of input during a buffer copy. This flaw allows an attacker to execute arbitrary code via the j2kdec_process() function. The issue is addressed in commit 9a253a07f...

RHEL 8 : kernel (RHSA-2026:65710)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65710 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm btree remove: fix use afte...

CVE-2026-21101: Improper Input Validation

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-71613: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

CVE-2026-87558: Use After Free

Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87572: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

CVE-2026-87448: Use After Free

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

ALSA-2026:66248 Important: ansible-core security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...