SUSE CVE-2026-79176

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-79219

Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

SUSE CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-82753

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-79238

A flaw was found in ServiceWorker in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, to bypass the web origin policy. Bypassing the web origin policy could lead to unauthorized...

CVE-2026-78944

A flaw was found in chromium-browser. This use-after-free vulnerability in Google Chrome's DevTools allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can occur if a user is deceived through social engineering into installing a malicious Chrome extensio...

CVE-2026-79226

A flaw was found in chromium-browser. This vulnerability, related to improper privilege management in Regional Capabilities, allows a remote attacker to bypass system access restrictions. By leveraging social engineering and a crafted Chrome extension, an attacker can gain unauthorized access...

CVE-2026-79176

A flaw was found in Google Chrome. This user interface UI misrepresentation in the Extensions feature allows a remote attacker to leverage social engineering techniques. By tricking a user into installing a specially crafted Chrome extension, the attacker can obtain sensitive information from the...

CVE-2026-79137

An incorrect authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505951430...

CVE-2026-79266

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, could exploit a use-after-free vulnerability in DevTools. This could lead to the execution of arbitrary code within the browser's sandbox environment...

EUVD-2026-66579

In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension exittousermodeloop invokes rseqgranttimesliceextension with interrupts enabled. If the extension is granted it invokes hrtimerrearmdeferredtif to ensure that a pending...

CVE-2026-74749 rseq: Prevent hard lockup on granted time slice extension

In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension exittousermodeloop invokes rseqgranttimesliceextension with interrupts enabled. If the extension is granted it invokes hrtimerrearmdeferredtif to ensure that a pending...

CVE-2026-79219

A flaw was found in Google Chrome's Bluetooth component. This use-after-free vulnerability, a type of memory corruption, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering techniques and a specially...

SUSE CVE-2026-68470

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at the regular 802.11 header offset. The generic RX path can still reach helpers and interface dispatch code that read...

Linux Distros Unpatched Vulnerability : CVE-2026-79026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co...

Linux Distros Unpatched Vulnerability : CVE-2026-79226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-79266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the...

Linux Distros Unpatched Vulnerability : CVE-2026-79137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...