ROS-20260909-73-0168

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260909-73-0166

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service interruptions...

ROS-20260909-73-0162

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created HTML page...

CVE-2026-86759: Missing Authorization

Snipe-IT versions before 8.7.0 fail to authorize the POST /hardware/history endpoint, allowing any authenticated user to reassign arbitrary assets and modify audit logs. Attackers can submit a CSV file to reassign assets across companies and inject fraudulent audit trail entries, compromising...

PT-2026-89008

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description In the AccountAcceptanceController::store function, the software fails to verify the return value of Storage::put when saving signature PNGs and generated acceptance PDFs. On filesystem drivers that...

ROS-20260909-73-0052

The vulnerability of the WebGL component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

openSUSE 16 Security Update : libidn (openSUSE-SU-2026:21758-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21758-1 advisory. This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Tenable has extracted the preceding...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow ...

The vulnerability of the p9_client_walk() function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the p9clientwalk function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the bio_integrity_map_user() function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the biointegritymapuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_button_remove() function in the drivers/acpi/button.c driver of the ACPI configuration and power management extended interface for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the acpibuttonremove function in the drivers/acpi/button.c driver of the Linux ACPI configuration and power management extension framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the snp_begin_psc() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the snpbeginpsc function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

The vulnerability of the macsec_post_decrypt() function in the drivers/net/macsec.c module of the network device driver for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the macsecpostdecrypt function in the drivers/net/macsec.c module of the network device driver for the Linux operating system is related to the bypassing of the authentication process. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the __cgroup_bpf_run_filter_sysctl() function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cgroupbpfrunfiltersysctl function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the sctp_wait_for_connect() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the bio_integrity_copy_user() function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the biointegritycopyuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the nf_conntrack_tcp_packet() function in the net/netfilter/nf_conntrack_proto_tcp.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter component of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise...

The vulnerability of the NS() function in the drivers/iommu/generic_pt/iommu_pt.h header of the Linux kernel allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the NS function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of protected information...

The vulnerability of the RoundCube Webmail email client, related to bypassing authentication through spamming, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the RoundCube Webmail email client relates to the ability to bypass authentication through spamming. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...