Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-64872

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-65754

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory...

EUVD-2026-47911

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-64872

The CVE-2026-64872 entry concerns a Joomla extension from regularlabs.com, specifically the Cache Cleaner Pro extension. The vulnerability is a path traversal issue where custom purge and log paths could escape the site webroot directory. Documents consistently reference this path traversal flaw ...

CVE-2026-64872

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

RLSA-2026:43505 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

SUSE-SU-2026:22936-1 Security update for net-tools

This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

OPENSUSE-SU-2026:21429-1 Security update for net-tools

This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30671)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from an issue with the CameraCapture module that allows for reuse after release. Attackers can exploit this vulnerability to achieve sandbox escape through specially crafted HTML pages...

PT-2026-64193

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description An out-of-bounds write occurs in the Codecs component, which could allow a remote attacker to perform a sandbox escape by using a specially crafted HTML page. A sandbox escape is a...

PT-2026-64190

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description A use-after-free issue exists in the Input component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-63602

Custom purge and log paths could escape the site webroot directory...

PT-2026-63980

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible through a sandbox escape within the Kotlin DSL Domain Specific Language, which is a concise notation for...

Google Chrome buffer overflow vulnerability (CNVD-2026-30673)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a boundary error in the V8 module. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox through specially crafted HTML pages...