CVE-2026-19142: Use After Free

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-66370: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction...

CVE-2026-48088: Missing Authorization

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route POST /api/tenants/tenantId/staff/staffId/crypto accepts and stores attacker-controlled ML-KEM-768 public keys against any tenant on the platform without...

CVE-2026-19176: Use After Free

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-50515: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

ROS-20260806-73-0022

The vulnerability of the PSI Pressure Stall Information mechanism in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

About the security content of macOS Sonoma 14.8.9

About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of macOS Sequoia 15.7.9

This document describes the security content of macOS Sequoia 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on th...

ROS-20260806-73-0009

The vulnerability of the smcibissgneedsync function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-68825

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description An authorized attacker can elevate privileges over a network by modifying assumed-immutable data maid within Azure Active Directory. Assumed-immutable data refers to attributes...

ROS-20260806-73-0012

The vulnerability of the cmpbss function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260806-73-0027

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to improper handling of exceptional conditions. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260806-73-0010

The vulnerability of the l2capsockcleanuplisten function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-19152: Protection Mechanism Failure

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-68747: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the CSS scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to inject CSS at-rules, including an import of a remote stylesheet, into a page served to other...

CVE-2026-65667: Missing Authorization

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-55978: Improper Access Control

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

Tenable Sensor Proxy < 1.4.2 Code Injection (TNS-2026-21)

According to its self-reported version, the Tenable Sensor Proxy running on the remote host is prior to 1.4.2. It is, therefore, affected by code injection vulnerability as referenced in the TNS-2026-21 advisory. - A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code...

CVE-2026-67687

The ics-park Smart Park Management System v2.0 contains an Insecure Permissions vulnerability (Vertical Privilege Escalation) that allows an authenticated low-privileged user to create a full-privilege administrator account. The root cause involves missing authorization checks in the RoleControll...

About the security content of macOS Tahoe 26.6.1

About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...