CentOS Linux 7 [TuxCare] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xephyr / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793374616)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793374616 advisory. - A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25...

RHEL 8 : bind9.16 (RHSA-2026:94277)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94277 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Linux Distros Unpatched Vulnerability : CVE-2026-112899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image dimensions before invoking Ghostscript...

PT-2026-136505

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in WebGPU, which is a modern API for GPU acceleration in the browser. This flaw allows a remote attacker to potentially execute arbitrary code outside the...

PT-2026-136485

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Track component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-136490

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136489

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the Network component allows a remote attacker to potentially execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is ...

PT-2026-136492

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in WebXR, which is an API that allows developers to create immersive virtual reality and augmented reality experiences. A remote attacker can leverage soci...

PT-2026-136455

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An out of bounds write occurs in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on native graphics APIs. This issue allows a remote...

PT-2026-136466

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A race condition in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race...

PT-2026-136474

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

PT-2026-136500

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An out of bounds read occurs in Skia, a graphics library, which allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox b...

PT-2026-136476

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Incorrect authorization in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering...

PT-2026-136635

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in CacheStorage, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to visit a specially crafted HTML page...

PT-2026-136670

Name of the Vulnerable Software and Affected Versions Amazon Redshift JDBC Driver versions prior to 2.3.0 Description Unsafe reflection occurs during the processing of the JDBC connection URL and AWS credentials profile resolution. An actor capable of influencing the connection parameter or the...

PT-2026-136544

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Scheduling component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-136185

Name of the Vulnerable Software and Affected Versions AzuraCast versions prior to 0.23.9 Description Authenticated station managers can achieve remote code execution by injecting Supervisor configuration via the station timezone field. By submitting a timezone containing newlines to the profile...

CVE-2026-44266: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

PT-2026-136514

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Improper state validation in the GPU component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by usi...

PT-2026-136513

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Printing component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...