CVE-2026-14420

An out of bounds read and write flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517031505...

CVE-2026-15765

An use after free flaw was found in the Ozone component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518007484...

CVE-2026-15120

An use after free flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523609602...

CVE-2026-15125

An inappropriate implementation flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523737685...

CVE-2026-15121

An use after free flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523712556...

CVE-2026-10207

creationtimestamp| type| source ---|---|--- 2026-07-28 12:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpehfd6be23 2026-07-28 15:06:49+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpos4bbbw2d...

CVE-2026-14328

creationtimestamp| type| source ---|---|--- 2026-07-28 11:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdiqtrku23...

CVE-2026-13161

creationtimestamp| type| source ---|---|--- 2026-07-28 11:30:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcpxmcwm2j...

CVE-2026-21047

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code...

CVE-2026-64247

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine Hyper-V component. A local attacker with access to a KVM guest could exploit this by providing an out-of-range Virtual Processor VP ID during a paravirtual Translation Lookaside Buffer TLB flush. This could lead to an...

BIT-THRIFT-2026-48144 Apache Thrift: c_glib TLS Client Missing Hostname Verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-17528

creationtimestamp| type| source ---|---|--- 2026-07-28 08:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozxatyca23...

CVE-2026-59764

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-16811

creationtimestamp| type| source ---|---|--- 2026-07-28 08:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroz4fj7mn2x...

ROOT-APP-NPM-CVE-2026-47423 CVE-2026-47423 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-47423 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41239 CVE-2026-41239 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-41239 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

CVE-2024-14041

Bouncy Castle for Java versions 1.73 to before 1.78 is affected by a timing-side-channel in ML-KEM (CRYSTALS-Kyber) decapsulation. Three routines divide secret-derived polynomial coefficients by the modulus q: Poly.toMsg (decoding the decrypted message) and the ciphertext compression routines Pol...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.26 security and extras update

Red Hat OpenShift Container Platform release 4.21.26 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

BELL-CVE-2026-64451 CVE-2026-64451 does not affect BellSoft software

Bulletin has no description...

CVE-2026-14821

The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...