CVE-2026-66310

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...

CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-50813

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path...

Google Android Authorization Vulnerability (CNVD-2026-26201)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to cause local information leaks...

Google Android SQL Injection Vulnerability (CNVD-2026-29386)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a SQL injection vulnerability. This vulnerability stems from the lack of validation for SQL statements submitted from external inputs by the Contacts Provider. Attackers can exploit this...

Google Android Authorization Vulnerability (CNVD-2026-29388)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities related to permissions. These vulnerabilities stem from a lack of permission checks in the MmsSmsProvider.java file. Attackers can exploit these vulnerabilities to cause...

USN-8328-1: OpenJDK 21 vulnerabilities

Thomas Beckers discovered that the JAXP component of OpenJDK 21 did not correctly authenticate certain APIs. A remote unauthenticated attacker could possibly use this issue to gain unauthorized access to sensitive information. CVE-2026-22016 It was discovered that the Networking component of...

USN-8153-1 salt vulnerabilities

Zach Malone discovered that Salt did not properly handle permissions to cache data. A local attacker could possibly use this issue to obtain sensitive information. CVE-2015-8034 Dylan Frese discovered that Salt incorrectly allowed users to specify PAM service. An attacker could possibly use this...

CVE-2026-0012

In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000830 advisory. The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtai...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000884 advisory. net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003998 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000601 advisory. The ipxrecvmsg function in net/ipx/afipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000571 advisory. The mISDNsockrecvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the siz...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001049 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000748 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000567 advisory. net/llc/sysctlnetllc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001391 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002995 advisory. Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive...