The vulnerability of the Downloads component in the Google Chrome browser allows attackers to perform spear-phishing attacks.

The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Accessibility component in Google Chrome allows a perpetrator to execute arbitrary code.

The vulnerability of the Accessibility component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s Compositing component allows attackers to gain unauthorized access to protected information.

The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

RHEL 8 : hplip (RHSA-2026:48960)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48960 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

PT-2026-67495

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 2.10.0 Description A Parameter Context update REST API method fails to enforce authorization checks on components that reference parameter values. While framework authorization was limited to read and write...

The vulnerability of the Font component in Google Chrome’s browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Font component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260803-73-0033

The vulnerability of the iwlwifi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

EUVD-2026-52479

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE...

EUVD-2026-51655

A reflected cross-site scripting XSS vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...

VulnCheck KEV: CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

Microsoft Edge (Chromium) < 151.0.4129.59 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.59. It is, therefore, affected by multiple vulnerabilities as referenced in the July 31, 2026 advisory. - Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security Bulletin: Unauthenticated Session History Access via Public Flow Execution

Summary A session ID namespace bypass vulnerability existed in Langflow OSS' POST /api/v1/buildpublictmp/flowid/flow endpoint that allowed unauthenticated attackers to access chat history from other users' sessions. The endpoint accepted an inputs.session parameter that could override the session...

DEBIAN-CVE-2026-18358

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication...

SUSE CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...