GHSA-3HHV-J9R2-HR9C vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-H267-996P-9GJC vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-7379-6RF2-Q4F9 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QX55-562J-V29W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V8CP-R57P-RCV9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R2VM-42VV-HRCM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X646-PH8G-WP5M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-93V7-558W-29J5 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-52PC-9JV4-4M3G vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11125 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J52W-H358-GGWW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-233P-6M42-WJ2R vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C2X2-VR52-6VJR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MF9P-6469-JCWH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7C7G-86F2-3W2X vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12374

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

ROOT-OS-DEBIAN-12-CVE-2026-46520 CVE-2026-46520 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-46520 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-50043

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege...

postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind

A flaw was found in PostgreSQL. This vulnerability, related to symlink following in pgbasebackup plain format and pgrewind, allows an origin superuser to overwrite local files. By exploiting this, an attacker could potentially hijack the operating system account. This attack has practical...

EUVD-2026-40824

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...