Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

Security Advisory 0147

Security Advisory 0147 PDF Date: August 25, 2026 Revision | Date | Changes ---|---|--- 1.0 | August 25, 2026 | Initial release 1.1 | August 31, 2026 | Updated the EOS versions affected and resolved The CVE-IDs tracking these issues: CVE-2026-59995 CVSSv3.1 Base Score: 5.4...

PT-2026-81573

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in WebXR allows a remote attacker to potentially leak cross-origin data through a crafted HTML page, provided the attacker can leverage social engineering to...

PT-2026-81605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

PT-2026-81628

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper resource exposure in the Preload component allows a remote attacker to bypass site isolation by using a crafted HTML page. Site isolation is a security feature that ensures pag...

PT-2026-81843

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper control of a resource through its lifetime in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. Site...

PT-2026-81789

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. Recommendations...

PT-2026-81828

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to...

PT-2026-81889

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.39 through 9.0.120 Apache Tomcat versions 8.5.59 through 8.5.100 Description An uncontrolled resource consumption issu...

The vulnerabilities of the functions hisi_sas_slot_task_free(), hisi_sas_release_task() in the module drivers/scsi/hisi_sas/hisi_sas_main.c, and dereg_device_v3_hw() in the module drivers/scsi/hisi_sas/hisi_sas_v3_hw.c of the Linux operating system allow a attacker to compromise the integrity of protected information or cause service failures.

The vulnerabilities of the functions hisisasslottaskfree, hisisasreleasetask in the module drivers/scsi/hisisas/hisisasmain.c, and deregdevicev3HW in the module drivers/scsi/hisisas/hisisasv3HW.c of the Linux kernel are related to synchronization errors when using shared resources. Exploiting the...

PT-2026-81484

Name of the Vulnerable Software and Affected Versions Airbyte Platform affected versions not specified Description An issue exists where the platform determines the workspace for authorization decisions based on a field supplied by the caller. The AuthorizationServerHandler copies recognized...

PT-2026-81698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81700

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially obtain cross-origin data by using a crafted HTML page. Recommendations Update...

PT-2026-81839

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to obtain cross-orig...

PT-2026-81584

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-81829

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to read...

The vulnerability of the `atmel_sha204a_rng_readnonblocking()` function in the `drivers/crypto/atmel-sha204a.c` driver of the Linux kernel cryptographic accelerator allows a hacker to cause a system failure.

The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `magicmouse_report_fixup()` function in the `drivers/hid/hid-magicmouse.c` driver module of the Linux kernel’s input device subsystem allows a hacker to trigger a maintenance failure.

The vulnerability of the magicmousereportfixup function in the drivers/hid/hid-magicmouse.c driver of the Linux kernel’s input device subsystem relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the esp_output_done() function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...