PT-2026-63247

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description A stack buffer overflow exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-15129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-15132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-15123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

CVE-2026-55081: Improper Neutralization of Input During Web Page Generation

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...

PT-2026-63252

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description A use-after-free issue exists in the UI component, where a remote attacker can exploit heap corruption—a condition where memory is corrupted in the heap area—by using a crafted HTML...

RHEL 8 : httpd:2.4 (RHSA-2026:42828)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42828 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

ROS-20260721-73-0026

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-15122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the...

Linux Distros Unpatched Vulnerability : CVE-2026-15111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially...

PT-2026-63253

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.182 Description A use-after-free issue exists in the GPU component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A...

ROS-20260721-73-0008

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to memory boundary violation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

ROS-20260721-73-0014

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to memory-related issues. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted HTML page...

ROS-20260721-73-0048

The vulnerability of the SSL Secure Sockets Layer protocol implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...

ROS-20260721-73-0032

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

ROS-20260721-73-0031

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

AlmaLinux 9 : python3.14 (ALSA-2026:41949)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:41949 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3132-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3132-1 advisory. This update for python311 fixes the following issues - CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers ...

Cross-site Scripting (XSS)

Overview astro is an Astro is a modern site builder with web best practices, performance, and DX front-of-mind. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the renderHTMLElement function. An attacker can inject arbitrary event-handler attributes or sibling...

Improper Encoding or Escaping of Output

Overview astro is an Astro is a modern site builder with web best practices, performance, and DX front-of-mind. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the transition:persist, transition:scope, or transition:persist-props directives when...