PT-2026-115321

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Recommendations Upda...

PT-2026-115322

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description A use after free issue exists in V8, which is the open-source JavaScript and WebAssembly engine used in Google Chrome. A remote attacker can execute arbitrary code within the sandbox by...

Google Chrome < 155.0.8059.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 155.0.8059.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop01886704284 advisory. - Use after free in Prerender in Google Chrome prior to 155.0.8059.84...

PT-2026-115314

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption occurs in the DOM Document Object Model, which is the programming interface for HTML and XML documents. This issue allows a remote attacker to execute arbitrary code...

PT-2026-115316

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description A use after free issue in Compositing allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-115317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Improper input validation in the Desktop component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-115319

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption in the Core component allows a remote attacker to read memory by inducing the user to visit a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-115323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description A use after free issue in Prerender allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that...

Google Chrome < 155.0.8059.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop01886704284 advisory. - Use after free in Prerender in Google Chrome prior to 155.0.8059....

CVE-2026-100169

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-85298

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue: CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: Update to version...

SUSE-SU-2026:4661-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: Update to version...

CVE-2026-85298 Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...

EUVD-2026-101004

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...

CVE-2026-85298

The Google Cloud Application Integration service (versions prior to 2026-08-27 ) is vulnerable to an Incorrect Authorization vulnerability. The root cause exists in the AuthConfig validation and integration execution runtime , which allows an authenticated user to perform privilege escalation and...

Fake Calendly “Meta Careers” pages steal Facebook and Google logins

We found a wave of websites posing as Calendly booking pages for job interviews at Meta. Visitors pick a slot for a 30-minute phone call with a recruiter, fill in their details, and pass what looks like a CAPTCHA. Then the page asks them to log in to Facebook. The interview is fake. The pages are...

Exploit for Type Confusion in Google Chrome

CVE-2024-2887 PoC - Write-up: https://jamezx32.github.io...

CVE-2026-87968 Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration

The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visito...

CVE-2026-87968

The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin, in versions before 5.3.2 , contains a vulnerability due to a missing nonce or capability check on an AJAX action. This flaw allows unauthenticated users to force a store re-regi...