EUVD-2026-83261

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...

CVE-2026-92747 Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...

CVE-2026-92745

A flaw in cockpit-machines allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token . The token is exposed because it is passed as a command-line argument to a helper script during the token validation proces...

USN-8726-2 linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

CVE-2026-84089: Improper Privilege Management

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893: Improper Privilege Management

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-92768: Invocation of Process Using Visible Sensitive Information

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-92745: Invocation of Process Using Visible Sensitive Information

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...

DEBIAN-CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

DEBIAN-CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

EUVD-2026-82487

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Google Chrome versions prior to 153.0.8010.52 are vulnerable to an out of bounds read in the DataTransfer component. A local attacker can leverage social engineering to use a local program to read memory outside the sandbox. This vulnerability has been addressed in several distributions, includin...

CVE-2026-93375

Google Chrome on Windows versions prior to 153.0.8010.52 is vulnerable to a high-severity issue where incorrect reference resolution in Tracing allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. The vulnerability has been addressed in version 15...

CVE-2026-50606

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

EUVD-2026-81397

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-50606 Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-50606

A hard-coded AES encryption key in the Acer System Monitoring component (shipped with NitroSense and PredatorSense) allows a local attacker with no privileges to potentially access protected information or perform unauthorized actions under certain circumstances. The vulnerability is rated CVSS 4...

EUVD-2026-81318

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...