EUVD-2026-124135

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124101

Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: High...

EUVD-2026-123903

A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow a remote privileged attacker to execute arbitrary code or command via crafted paquets...

EUVD-2026-123845

A improper neutralization of argument delimiters in a command 'argument injection' vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admi...

tesseract security update

An update is available for tesseract. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 and...

libXi security update

An update is available for libXi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Denial of Service...

RLSA-2026:98504 Important: libXi security update

X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser CVE-2026-93543 libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based...

RLSA-2026:98514 Important: tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via craft...

CVE-2026-126842

A flaw was found in the ANGLE component of Chromium. A remote attacker could exploit this vulnerability to execute arbitrary code outside the browser sandbox. By convincing a user to view a specially crafted HTML page, the attacker triggers a use-after-free condition in the graphics engine...

CVE-2026-126916

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by enticing a user to visit a crafted HTML page. The vulnerability is caused by an integer overflow in the V8 JavaScript engine during content processing...

CVE-2026-126909

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox by exploiting a use-after-free memory corruption issue in the password management component. By tricking a user into visiting a specially crafted HTML page, an attacker could escape...

CVE-2026-126904

A flaw was found in the Compositing component of Chromium. A use-after-free memory corruption issue allows arbitrary code execution outside the browser sandbox. A remote attacker who has already compromised a browser renderer process could exploit this flaw by enticing a user to view a crafted HT...

CVE-2026-126901

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by enticing a user to visit a specially crafted HTML page. This issue is caused by a use-after-free vulnerability in the PDF Portable Document Format component, where memory is...

CVE-2026-126900

A flaw was found in chromium-browser's Cascading Style Sheets CSS component. A remote attacker could exploit a use-after-free vulnerability by convincing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-126910

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution inside the browser sandbox by tricking a user into visiting a specially crafted HTML page. This vulnerability is caused by a type confusion issue in the V8 JavaScript engine, where data of one type is...

CVE-2026-126880

A flaw was found in the V8 engine in chromium-browser. A remote attacker could exploit this type confusion vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted sandbox...

CVE-2026-126847

A flaw was found in the V8 JavaScript engine in chromium-browser. A remote attacker could exploit this type confusion vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox. Mitigati...

CVE-2026-126919

A flaw was found in Google Chrome's BrowserTag component. A remote attacker could exploit a use-after-free memory vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox...

CVE-2026-126851

A flaw was found in the Accessibility component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering a use-after-free memory error. Successful exploitation may allow an attacker to execute arbitrary code inside the...

CVE-2026-126886

A flaw was found in chromium-browser. A use-after-free vulnerability exists in the handling of frames. By convincing a user to visit a specially crafted HTML page, a remote attacker could trigger memory corruption and achieve arbitrary code execution inside the browser sandbox. Mitigation...