RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:62637)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62637 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

PT-2026-84852

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...

SpiderSapien: Client-Centric Web Crawler and Security Scanner

Black-box web application crawling and scanning play an important role for security testing of web applications. Yet state-of-the-art scanners fall short of addressing key characteristics of a modern web application: its extreme dynamism and interactivity on the client side. This paper identifies...

PT-2026-84846

Name of the Vulnerable Software and Affected Versions HTTPX2 versions prior to 2.11.0 Description The Request. prepare function in src/httpx2/httpx2/ models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header. This occurs...

Navigation Component Google Chrome Microsoft Edge Confidential Data Access

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data through a specially created HTML page...

NDR RDPEAR RDP-client Parser Unauthorized Access

The vulnerability of the NDR RDPEAR RDP-client FreeRDP lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

Network Component Compromise Data Compromise

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

camel-elasticsearch-rest-client Security Bypass

The vulnerability of the camel-elasticsearch-rest-client component of the Java framework Apache Camel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

GuestView Component Compromise Data Compromise

The vulnerability of the GuestView component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

Bluetooth Component DoS

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

DevTools Component Confidential Data Access

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

Actor component Data Compromise

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Network Component Compromise Data Compromise

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

go-fdo-client security update

1.0.0-7 - Rebuild go-fdo-client against updated golang 1.0.0-6 - Rebuild go-fdo-client against updated golang 1.0.0-5 - Rebuild against updated golang...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Bluetooth Component DoS

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

Serial Component DoS

The vulnerability of the Serial component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

httpcomponents-client-4.5.14-2.1 on GA media (moderate)

httpcomponents-client-4.5.14-2.1 on GA media Announcement ID: openSUSE-SU-2026:11647-1 Rating: moderate Cross-References: CVE-2026-64607 CVSS scores: CVE-2026-64607 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-64607 SUSE : 6.9...