CVE-2026-87084

Tanium Enforce is affected by a server-side request forgery (SSRF) vulnerability, rated 7.7 (HIGH) by Tanium's CVSS v3.1 assessment (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). The vulnerability allows a network-based attacker with low privileges to exploit the flaw without user interaction, resulting ...

CVE-2026-87084 Tanium addressed a server-side request forgery vulnerability in Enforce.

Tanium addressed a server-side request forgery vulnerability in Enforce...

CVE-2026-87073

Tanium Comply is affected by an improper access controls vulnerability, as addressed by Tanium and referenced in advisory TAN-2026-029 . The CVSS 3.1 score is 6.5 (MEDIUM) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a network-based attack with low complexity and low privilege...

CVE-2026-87034 Tanium addressed a SQL injection vulnerability in Comply.

Tanium addressed a SQL injection vulnerability in Comply...

EUVD-2026-74559

Tanium addressed a SQL injection vulnerability in Comply...

CVE-2026-87035

Tanium addressed an information disclosure vulnerability in its Comply product. The CNA-assigned CVSS 3.1 score is 4.3 (MEDIUM) with a network attack vector, low complexity, low privileges required, no user interaction, and a low impact on confidentiality with no integrity or availability impact....

CVE-2026-14892

Tanium Server is affected by an improper access controls vulnerability, as disclosed in Tanium advisory TAN-2026-031 . The vulnerability has been addressed by Tanium. According to the CVSS 3.1 score of 4.3 (MEDIUM) , exploitation requires network access with low privileges and no user interaction...

CVE-2026-87030

Tanium Comply is affected by a path traversal vulnerability that Tanium has addressed (see TAN-2026-043 ). The vulnerability is rated CVSS 8.5 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L, indicating a network-exploitable flaw requiring low privileges and no user interaction, with ...

CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-87025 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

EUVD-2026-74547

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87037 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87572

A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...

CVE-2026-87658

creationtimestamp| type| source ---|---|--- 2026-09-09 01:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d6j3ctyvz2xde 2026-09-10 04:46:07+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:45:03+00:00| seen|...

CVE-2026-87531

Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CLEANSTART-2026-BA42566 In Eclipse Jetty, the HTTP/1

Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...

CLEANSTART-2026-ZI18123 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-71616

CVE-2026-71616 is a denial of service vulnerability in the GPAC multimedia framework, triggered via the function gf_route_media_complete_object() in commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3. The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector, no privileges required, and high ava...

The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

VRT0011, Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability for some Intel® Converged Security and Management Engine Intel® CSME and Intel® Server Platform Services Intel® SPS may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details:...