CVE-2026-113097

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox by convincing a user to visit a crafted HTML page. The issue stems from a use-after-free error in the FileSystem component, which occurs when the...

CVE-2026-113228

A flaw was found in chromium-browser. A use-after-free vulnerability in the Network component occurs when the browser accesses memory that has already been released. A remote attacker could exploit this flaw by enticing a user to open a specially crafted HTML page, potentially allowing arbitrary...

CVE-2026-113080

A flaw was found in the WebAppInstalls component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's restricted sandbox environment. By convincing a user to open a specially crafted HTML page, an attacker can trigger a use-after-free memory flaw...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

CVE-2026-113259

A flaw was found in the Frames component of Chromium. A remote attacker can exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after being released. Successful exploitation allows the attacker to...

CVE-2026-113255

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free memory error in the CustomTabs component...

CVE-2026-113227

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser sandbox due to a use-after-free issue in the Editing component, where previously released memory is improperly accessed. To exploit this vulnerability, an attacker must...

CVE-2026-113174

A flaw was found in the Extensions component of the Chromium browser. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to access memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a...

CVE-2026-113123

A flaw was found in chromium-browser. A use-after-free flaw in the GPU Graphics Processing Unit component allows memory to be improperly accessed after it has been released. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, potentially...

CVE-2026-113156

A flaw was found in Google Chrome's Messages component. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free error, where the application accesses memory that has...

CVE-2026-113112

A flaw was found in chromium-browser. A use-after-free vulnerability exists within the Extensions component. A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox environment...

CVE-2026-113085

A flaw was found in the Media component of chromium-browser. By convincing a user to open a specially crafted HTML page, a remote attacker can trigger a use-after-free memory flaw, where the browser accesses memory after it has been released. Successful exploitation allows the attacker to execute...

CVE-2026-113044

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser's sandbox due to a use-after-free memory vulnerability in the V8 JavaScript engine. An attacker can exploit this issue by convincing a user to open a specially crafted...

CVE-2026-113087

A flaw was found in chromium-browser. The Actor component contains a use-after-free vulnerability, which occurs when memory is accessed after it has already been released. A remote attacker could exploit this issue by enticing a user to visit a specially crafted HTML page, potentially resulting i...

CVE-2026-113024

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the sandbox environment by convincing a user to visit a specially crafted HTML page. The issue is caused by a use-after-free condition in the WebAppInstalls component, wher...

RockyLinux 9 : postgresql:18 (RLSA-2026:85814)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85814 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_84583)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684583 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

libsvg Heap Buffer Overflow DoS

The vulnerability of the SVG vector graphics rendering library, librsvg, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

[ASA-202610-1] php: arbitrary code execution

Arch Linux Security Advisory ASA-202610-1 ========================================= Severity: Critical Date : 2026-10-21 CVE-ID : CVE-2026-109618 CVE-2026-109619 Package : php Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2909 Summary ======= The package p...

[ASA-202610-2] php-legacy: arbitrary code execution

Arch Linux Security Advisory ASA-202610-2 ========================================= Severity: Critical Date : 2026-10-21 CVE-ID : CVE-2026-109618 CVE-2026-109619 Package : php-legacy Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2910 Summary ======= The...