CVE-2026-121097: Google Chrome: Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136329

Name of the Vulnerable Software and Affected Versions Elo versions prior to 1.0.1 Description Plain Elo strings provided to the defaultFormats.elo.parse function, bin/elo, or the elo-lang.org/try endpoint can lead to the execution of attacker-selected code in the host runtime. This occurs because...

Coldai Aono FastAPI code generator improper output handling vulnerability

A security vulnerability exists in Koudai Aono FastAPI code generator versions prior to 0.8.1. This vulnerability arises because the generator fails to escape quotes within OpenAPI paths, inserting them into the @app.get route decorator string. As a result, attackers can inject Python expressions...

CVE-2026-121178: Google Chrome: Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the…

Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136465

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A buffer overflow in the Media component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Recommendation...

PT-2026-136498

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

Microsoft Visual Studio 15.9.x < 15.9.84 / 16.11.x < 16.11.61 / 17.14.x < 17.14.43 / 18.x < 18.11.2 Brotli Decoder Out-of-bounds Write (CVE-2026-111497)

The version of Microsoft Visual Studio installed on the remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - A buffer overflow in the Brotli decoder c/dec/decode.c in Google Brotli 1.0.3 through 1.2.0 allows a remote...

Oracle Linux 8 : bind (ELSA-2026-93925)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93925 advisory. - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay - CVE-2026-19630 bind: BIND: Denial of Service via unbounded...

Oracle Linux 9 : bind (ELSA-2026-93610)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93610 advisory. - Fix CVE-2026-94300: Arbitrary code execution via GSS-TSIG UDP message replay. - Fix CVE-2026-97313: Denial of Service via assertion failure in RPZ...

AlmaLinux 9.2 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793692618)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793692618 advisory. - A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and...

RHEL 8 : raptor2 (RHSA-2026:94519)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94519 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

RockyLinux 8 : bind9.16 (RLSA-2026:94011)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94011 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

CVE-2026-121163: Google Chrome: Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had…

Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-121211: Google Chrome: Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised…

Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-121229: Google Chrome: Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to…

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-121234: Google Chrome: Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to…

Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121238: Google Chrome: Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121089: Google Chrome: Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute…

Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121118: Google Chrome: Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121128: Google Chrome: Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary…

Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...