EUVD-2026-79993

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91730

A vulnerability in Google Chrome (prior to version 153.0.8010.47) stems from incomplete cleanup in GetUserMedia . A remote attacker who has already compromised the renderer process can leverage social engineering via a crafted HTML page to obtain cross-origin data . This issue is also present in ...

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Chromium CVE-2026-87549: Incomplete cleanup in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87446: Incomplete cleanup in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87436: Incomplete cleanup in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-97293

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.19 through 11.0.25 Apache Tomcat versions 10.1.53 through 10.1.59 Apache Tomcat versions 9.0.116 through 9.0.121 Description An incomplete cleanup issue allows a malformed request to potentially cause a request from...

PT-2026-93148

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incomplete cleanup in the GetUserMedia function allows a remote attacker to obtain cross-origin data. This occurs when an attacker has already compromised the renderer process and uses...

Astra Linux – Vulnerability in Tomcat9

There is an incomplete cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from version 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80, and from 8.5.0 through 8.5.93, an error may cause Tomcat to skip certain...

Astra Linux – Vulnerability in Intel Microcode

Incomplete cleanup in specific special register read operations for some IntelR processors may allow an authenticated user to potentially enable information disclosure via local access...

Chromium CVE-2026-85043: Incomplete cleanup in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-81006

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI component. During the registration of an IPMI system management interface, an error in the cleanup process can leave a system file sysfs attribute registered even after its associated memory has been released...

CVE-2026-87436

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an incomplete cleanup vulnerability in the browser. This could allow the attacker to bypass the web origin policy through a specially crafted extension, potentially leading to unauthorized access to...

Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...

PT-2026-89483

TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability...

TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

DEBIAN-CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...