626 matches found
EUVD-2026-50762
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66012
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the FileSystem component allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chro...
PT-2026-66173
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in WebMCP allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from on...
PT-2026-66058
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in Extensions allows an attacker to inject arbitrary scripts or HTML Universal Cross-Site Scripting or UXSS via a crafted Chrome Extension, provided the...
PT-2026-66148
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Privilege Escalation
FileGator is vulnerable to Privilege Escalation. The vulnerability is due to insufficient validation of user-supplied file permission values, where arbitrary Unix permission modes are passed directly to chmod, allowing authenticated users with chmod permission to escalate privileges to root...
Beyond GDPR: Examining Disclosure Gaps in Mobile AR Privacy Policies under U.S. State Privacy Laws
Mobile Augmented Reality MAR apps can collect and process highly sensitive data such as spatial maps and biometrics, yet their privacy policies remain largely understudied. Prior audits of app privacy policies have typically focused on a single legal framework, such as the GDPR. Meanwhile, 20 U.S...
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely. The CrowdStrike...
SUSE CVE-2026-64061
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
SUSE CVE-2026-64064
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsinvalidatefolio to clear dirty bit if all changes gone If a streaming write is made, this will leave the relevant modified folio in a not-uptodate, but dirty state with a netfsfolio struct hung off of folio-privat...
Salience Induction against Multi-Hop RAG Agents: Threat and Defense
Agentic retrieval-augmented generation RAG systems increasingly retrieve external evidence and orchestrate tools for knowledge-intensive applications. In Multi-Hop question answering, agents chain facts across documents. Existing defenses focus on content poisoning, which injects false facts, and...
CVE-2026-64061
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
CVE-2026-64061
The CVE-2026-64061 entry concerns a use-after-free in the Linux kernel netfs layer (netfs_read_gaps) where the sink page is prematurely released during a network read, enabling memory corruption. The issue was observed via KASAN in a cifsd-based trace and is described across multiple vendors (Red...
CVE-2026-64061 netfs: Fix early put of sink folio in netfs_read_gaps()
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
CVE-2026-64061
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
EUVD-2026-45634
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
CVE-2026-64061 netfs: Fix early put of sink folio in netfs_read_gaps()
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
PT-2026-61381
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where netfs invalidate folio fails to clear the dirty bit when all changes in a folio are removed during a file truncation. This leaves the folio i...
PT-2026-61378
Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0 Description A use-after-free issue exists in the netfs read gaps function. The problem occurs because the sink page is released prematurely before the request completes. This sink page is used within an ITER BVEC-cla...