CVE-2026-17692

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17692

CVE-2026-17692 involves a Use-After-Free in DataTransfer in Google Chrome for Windows, prior to version 151.0.7922.72. The flaw could let a renderer‑process‑hijacked page potentially escape the Chrome sandbox, enabling a remote attacker to impact the host after compromising the renderer. The vuln...

CVE-2026-17692

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66563

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

PT-2026-66011

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-17932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from...

CVE-2026-13874

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498411773...

CVE-2026-13944

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513224212...

CVE-2026-13990

An insufficient validation of untrusted input flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514058439...

SUSE CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

UBUNTU-CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

CVE-2026-64535

CVE-2026-64535 affects the Linux kernel nvmet-tcp (NVMe over Fabrics TCP target). Root cause: when data digest is enabled and a digest mismatch occurs on a non-final H2C_DATA PDU during an R2T-based transfer, nvmet_tcp_try_recv_ddgst() calls nvmet_req_uninit() which does percpu_ref_put() but does...

CVE-2026-64535 nvmet-tcp: Fix potential UAF when ddgst mismatch

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

CVE-2026-64535 nvmet-tcp: Fix potential UAF when ddgst mismatch

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

Linux Distros Unpatched Vulnerability : CVE-2026-64535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a diges...

SUSE CVE-2026-64407

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxprecvfwreqv3 During the v3 firmware download the controller sends a v3datareq with a 32 bit offset and a 16 bit len. nxprecvfwreqv3 checks only the lower bound of the...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-63897

A flaw was found in the Linux kernel's mctu232 USB serial driver. This vulnerability stems from an inadequate check on the size of data transfers from a USB device. This oversight could allow the system to process outdated or uninitialized kernel memory, potentially leading to information...