CVE-2026-59514

The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions

EUVD-2026-48187

Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the WebUI of Google Chrome on Linux, Mac, Windows, and ChromeOS prior to version 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome on Linux, before version 148.0.7778.168, unauthorized access was possible when reading data from the GPU. A remote attacker who had compromised the renderer process could leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in the WebUI of Google Chrome before version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

RHSA-2026:42079 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:42080 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:42078 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: pghero, ruby3.3-rails, ruby4.0-rails, pghero-fips, ruby3.4-rails, ruby3.2-rails...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: pghero, ruby3.3-rails, ruby4.0-rails, pghero-fips, ruby3.4-rails, ruby3.2-rails...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: keep-fips, keep, authentik-fips, rancher-api-ui, arangodb, nextcloud-server, authentik, vitess...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: duplicity, metaflow-service, apache-beam-python-3.12-sdk, kubeflow-pipelines, litellm, mlflow, py3-cassandra-medusa, openstack-keystone-2025.1-fips, openstack-keystone-2026.1, gitlab-cng, wazuh-manager, openstack-keystone-2026.1-fips, kubeflow-pipelines-fips,...

GHSA-H668-6X6G-F8R5 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

USN-8593-1: Linux kernel vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...