RHEL 10 : python3.14-cryptography (RHSA-2026:64795)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64795 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

AlmaLinux 10 : python3.14-cryptography (ALSA-2026:64795)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64795 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...

ROS-20260908-73-0082

The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...

PT-2026-88630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uncontrolled search path element in the CredentialProvider allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows systems. Recommendatio...

PT-2026-88626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Passwords component. This allows a remote attacker to potentially execute arbitrary code outside the sandbox through UI interaction, provided they c...

PT-2026-88653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in SiteIsolation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

PT-2026-88654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in Chromoting on Windows allows a local attacker to execute arbitrary code outside the sandbox using a local program. A race condition occurs when the timing or sequenc...

PT-2026-88716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper initialization in Views on Windows allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already compromised th...

PT-2026-88600

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper validation of an array index in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update...

PT-2026-88579

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Insufficient policy enforcement in Extensions allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This requires the attacker to...

PT-2026-88624

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Core allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...

PT-2026-88610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the FileAPI allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

PT-2026-88682

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in DataTransfer allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HT...

PT-2026-88718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An incorrect reference resolution in Storage on Windows allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by...

PT-2026-88614

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Views allows a local attacker to execute arbitrary code outside the sandbox via a local program. Use after free is a memory corruption flaw that occurs when an...

PT-2026-88548

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code outside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that...

PT-2026-88555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Aura allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a...

CVE-2026-82584

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...

CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...

EEF-CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata

Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's...