CVE-2026-107886

A flaw was found in CUPS. An authenticated user authorized to manage printer classes can cause a Denial of Service DoS by triggering a double-free memory error during printer class management. By submitting a class modification request with invalid parameters followed by a class deletion request,...

CVE-2026-98311

A flaw was found in the Linux kernel's virtwifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory...

CVE-2026-106421

An use after free flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567873463...

CVE-2026-106423

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566347711...

CVE-2026-106383

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567447106...

CVE-2026-106357

An use after free flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567160162...

CVE-2026-106349

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567538973...

CVE-2026-106278

An use after free flaw was found in the Select component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565774991...

CVE-2026-106268

An use after free flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565742177...

CVE-2026-106257

An use after free flaw was found in the HTML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565674529...

CVE-2026-106248

An use after free flaw was found in the Bindings component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563673584...

CVE-2026-106227

An use after free flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561891645...

CVE-2026-106233

An use after free flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565797213...

CVE-2026-106204

An use after free flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567910530...

CVE-2026-106211

An use after free flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562002095...

CVE-2026-106200

An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568422505...

CVE-2026-85042

An use after free flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553119925...

CVE-2026-98230

A flaw was found in the Linux kernel's IPsec xfrm subsystem. A local attacker can trigger repeated state deletion during cleanup, leading to a use-after-free condition where the kernel attempts to access memory that has already been released. This vulnerability may allow an attacker to achieve...

CVE-2026-98229

A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...