PT-2026-136621

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An integer overflow exists in the GPU component. A remote attacker who has already compromised the renderer process can leverage a specially crafted HTML page to potentially execute...

PT-2026-136616

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Passwords component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

CVE-2026-115878: stanfordnlp stanza: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

PT-2026-136643

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 157.0.8103.38 Description A use-after-free issue in the navigation component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted...

CVE-2026-121044: Google Chrome: Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119084: AWS amazon-redshift-jdbc-driver: Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before…

Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class ...

CVE-2026-121123: Google Chrome: Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121124: Google Chrome: Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to…

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An out of bounds read occurs in Internals, which allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

CVE-2026-121083: Google Chrome: Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary…

Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121168: Google Chrome: Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging…

Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-136539

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in Canvas, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use aft...

CVE-2026-121230: Google Chrome: Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute…

Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-136652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in Extensions, where a remote attacker could use social engineering to potentially execute arbitrary code outside the sandbox by utilizing a crafted Chrome...

PT-2026-136727

Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases affected versions not specified Description An issue exists in the installLicense script where user-supplied paths are not properly validated before being used in file operations. This directory traversal flaw allo...

CVE-2026-95723: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-121052: Google Chrome: Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

raptor2 security update

2.0.15-18 - CVE-2025-71436 raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling heap-based buffer overflow in language tag handling - Resolves: RHEL-287843...

ALSA-2026:94519 Important: raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fixes: raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling CVE-2025-71436 For more details about the...

CVE-2026-121061: Google Chrome: Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary…

Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...