CVE-2026-84354

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques to trick a user into opening a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security...

ROS-20260911-73-0153

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-90206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 file system where the directory cookie position is incorrectly rebuilt in the ocfs2 dir foreach blk el function on 32-bit kernels. This occurs because the ma...

PT-2026-90362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component of the Linux kernel where an inode reference is leaked during a writeback abort during unmount. The ceph dirty folio function creates a wrbuffer cla...

PT-2026-90327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs attr update meta function fails to properly validate the name offset when converting between non-sparse and sparse attributes. Convertin...

CVE-2026-89248: Exposure of Sensitive Information to an Unauthorized Actor

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, any unauthenticated remote user can request /plugin/WebRTC/status.json.php and receive JSON containing the absolute...

CVE-2026-89615: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound pagelcns index by the log record The copylcns loop and the redo shorten loop index pagelcns at j + i, where i runs up to the log record's lcnsfollow. That count is checked only against the record's own length, not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107323 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we...

PT-2026-90363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy loop occurs in the Ceph component of the Linux kernel when ceph cap reclaim work repeatedly re-queues itself because ceph trim dentries returns -EAGAIN. This happens when a lease...

PT-2026-90317

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext2 file system where inode updates may be lost for IS SYNC inodes. This occurs within the ext2 setsize and ext2 xattr set2 functions because sync inode metadata...

ROS-20260911-73-0080

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-90377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel's NFSD component. A local administrator with CAP SYS ADMIN privileges can trigger this by stopping the server and writing a filesystem...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107263 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushe...

PT-2026-90241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF 1.50 virtual partition mapping where the VAT Virtual Allocation Table is used as an array of physical block mappings. The s num entries variable stores the tot...

PT-2026-90209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 component of the Linux kernel where the ocfs2 validate refcount block function fails to validate the rl used and rl count variables against the actual on-dis...

CVE-2026-9336

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9336 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9336 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

EUVD-2026-75677

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9336

IBM WebSphere Application Server versions prior to 9.0.5.29 and 8.5.5.31 are vulnerable to a denial of service when a specially-crafted HTTP request is sent to an administrative endpoint , causing the server to exhaust filesystem space . The NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with a netwo...