PT-2026-106895

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to versio...

PT-2026-106926

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in Extensions allows a remote attacker to obtain cross-origin data through the use of a crafted Chrome extension. Cross-origin data refers to information belongi...

PT-2026-106947

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106250: Missing Authorization

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106249: Incorrect Authorization

Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-106943

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the WebAppInstalls component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-106962

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Federated Credential Management FedCM API allows a remote attacker to bypass the web origin policy by using a crafted HTML page. FedCM is a browser API...

CVE-2026-106244: Incorrect Authorization

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

PT-2026-107075

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Accessibility component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site...

PT-2026-107090

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Network component allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one orig...

CVE-2026-106183: Missing Authorization

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106870

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in Chromoting on Mac allows a remote attacker to bypass system access restrictions by sending crafted network traffic. Recommendations Update Google Chrome to...

PT-2026-107061

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to induce the installation ...

CVE-2026-106202: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-106318

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user id leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and mig...

PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106223: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106246: Incorrect Authorization

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107312

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper access control allows a remote authenticated attacker to execute arbitrary code. Recommendations Upgrade to version 1.12.3...

Security Advisory 0187

Security Advisory 0187 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description All CVEs covered in this advisory affect CloudVision Portal On-Premises, where specially crafted requests could result in user redirection to arbitrary...