Chromium: CVE-2026-15131 Insufficient data validation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15123 Insufficient data validation in DOM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13871

An insufficient data validation flaw was found in the GuestView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497961376...

CVE-2026-13808

An insufficient data validation flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504221510...

CVE-2026-13881

An insufficient data validation flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499100491...

CVE-2026-13919

An insufficient data validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511249430...

CVE-2026-13911

An insufficient data validation flaw was found in the Spellcheck component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507239830...

CVE-2026-14100

An insufficient data validation flaw was found in the NetworkCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513383891...

CVE-2026-13962

An insufficient data validation flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513721370...

CVE-2026-14009

An insufficient data validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516819850...

CVE-2026-14128

An insufficient data validation flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514015836...

CVE-2026-14118

An insufficient data validation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513772764...

CVE-2026-15131

An insufficient data validation flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=526542464...

CVE-2026-15123

An insufficient data validation flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523729553...

USN-8611-1 glibc vulnerabilities

It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. CVE-2026-4046 It was discovered that the GNU C Library DNS functions incorrectly handled certain DNS server responses whe...

CVE-2026-45813

Apache NimBLE versions through 1.9.0 are vulnerable to an out-of-bounds write and integer underflow (wrap or wraparound) in the BASS service. The root cause is improper validation during the parsing of Protocol Data Units (PDU) for "Add Source" and "Modify Source" operations. This flaw can result...

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

ROS-20260723-73-0053

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...