30990 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-79137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...
Linux Distros Unpatched Vulnerability : CVE-2026-78944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the...
Linux Distros Unpatched Vulnerability : CVE-2026-78897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-78960
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104817)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104817 advisory. In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098720)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098720 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sqlite (UTSA-2026-104747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104747 advisory. SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104531 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header...
Linux Distros Unpatched Vulnerability : CVE-2026-79064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-79148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside t...
Linux Distros Unpatched Vulnerability : CVE-2026-78947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104613)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104613 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matche...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104607)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104607 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header...
Linux Distros Unpatched Vulnerability : CVE-2026-79238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin...
Linux Distros Unpatched Vulnerability : CVE-2026-39113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check- in...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sqlite (UTSA-2026-104748)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104748 advisory. SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104536)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104536 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matche...
openssl: openssl: Denial of Service via race condition in certificate extension caching
A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service DoS by initiating concurrent connections to a multi-threaded Transport Layer Security TLS client or server verifying certificates. Due to improper synchronization when multiple threads simultaneously...
openssl: RPK server signature algorithm selection can dereference a missing certificate
A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...
CVE-2026-79266
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...