PT-2026-136452

Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136439

Name of the Vulnerable Software and Affected Versions Puppet Server versions prior to 2023.8.13 Puppet Server versions prior to 2025.12.1 Puppet Server versions prior to 2026.0.1 Description Deserialization of untrusted data in the report-processing code allows a client possessing any CA-signed...

ROS-20261103-73-0108

The vulnerability in Apache ActiveMQ is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-136553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in DevTools. A remote attacker can use social engineering to lure a user to a crafted HTML page, leading to arbitrary code execution within the sandbox. Ty...

PT-2026-136602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Incorrect reference resolution in DevTools allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page, provided the attacker leverages...

PT-2026-136583

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in PDFium allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a...

PT-2026-136582

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in Aura allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is achieved by using a...

PT-2026-136586

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the DOM allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a...

PT-2026-136572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Improper resource exposure in DevTools allows a remote attacker to execute arbitrary code inside the sandbox by using social engineering and a crafted HTML page. Recommendations Update...

PT-2026-136502

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A buffer overflow in the Skia graphics library allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a specially crafted HTML page. A buffe...

PT-2026-136506

Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136508

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Uncontrolled recursion in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the browser to load a crafted HTML page. Recommendations Upda...

PT-2026-136494

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which can allow a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to visit a specially...

PT-2026-136499

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in Compositing allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-136628

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to potentially execute...

PT-2026-136640

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in Source allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-136658

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use of released resource in the GPU allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML...

PT-2026-136510

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

AlmaLinux 8 : bind (ALSA-2026:93925)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93925 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

PT-2026-136619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Streaming component. This allows an adjacent attacker to execute arbitrary code within the sandbox by sending specially crafted network traffic...