PT-2026-84554

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in Dawn, which is a WebGPU implementation. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user...

PT-2026-84565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in Navigation allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

PT-2026-84566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a specially crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-84558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description An information leak exists in the MediaCapture component. A remote attacker can potentially leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations...

ALSA-2026:62144 Moderate: wget security, bug fix, and enhancement update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471...

PT-2026-84553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in SiteSettings allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to version...

ALSA-2026:62142 Moderate: wget security, bug fix, and enhancement update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or denial of service via crafted...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

Vulnerability of CSS components in Google Chrome and Microsoft Edge web browsers, allowing attackers to access confidential data

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Blink component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Blink component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the UI components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability in the Google Chrome web browser, related to reading data beyond the allowed buffer size, allows a hacker to gain access to confidential data.

The vulnerability in the Google Chrome web browser relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

The vulnerability of the SVG component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and influence the integrity of the data.

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a special...

The vulnerability of the Serial component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise data integrity.

The vulnerability of the Serial component in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a...