CVE-2026-108174

The PluginUs.Net FOX woocommerce-currency-switcher WordPress plugin, versions up to and including 1.5.4 , is vulnerable to a Missing Authorization (CWE-862) issue. The vulnerability stems from Incorrectly Configured Access Control Security Levels , potentially allowing unauthorized actions. The i...

CVE-2026-108174: Missing Authorization

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4...

CVE-2026-104112

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CVE-2026-104112 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CVE-2026-104112 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CVE-2026-104112

The illumos name service cache daemon (nscd ) is vulnerable to a kernel memory exhaustion flaw due to a missing release of file descriptors . Specifically, the switcher() procedure in usr/src/cmd/nscd/nscd_frontend.c fails to close descriptors passed via a door call that are not used by the reque...

EUVD-2026-95801

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CVE-2026-104112: Missing Release of Resource after Effective Lifetime

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CLEANSTART-2024-RR96243 Use after free in Browser Switcher in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Browser Switcher in Google Chrome prior to 101...

Astra Linux – Vulnerability in Chromium

Before version 101.0.4951.41, using the Browser Switcher in Google Chrome allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page, as long as that attacker could convince a user to perform certain user interactions...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the Browser Switcher component of Google Chrome prior to version 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. Chromium security severity: Medium...

benchmark-runner (>=1.0.141, <=1.0.362), proxmox-pci-switcher (>=0.10.6, <=0.10.7) +4 more potentially affected by CVE-2026-44405 via paramiko (2.8.0)

paramiko PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - benchmark-runner =1.0.141, =0.10.6, =0.9.17, =0.0.2, =0.2.7, =0.2.9 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

build-magic (>=0.4.1rc0, <=0.5.1rc0), lemur (>=1.1.0, <=1.2.0) +10 more potentially affected by CVE-2026-44405 via paramiko (2.9.2)

paramiko PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - build-magic =0.4.1rc0, =1.1.0, =0.10.10, =1.0.0, =0.10.4, =0.2.0.1, =0.0.0.dev0, =1.27.0, =1.34.0 - wizardwebssh 1.9.0 Source cves: CVE-2026-444...

edos (1.3.0), proxmox-pci-switcher (>=0.14.1, <=0.15.3) +5 more potentially affected by CVE-2026-44405 via paramiko (2.10.4)

paramiko PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - edos 1.3.0 - proxmox-pci-switcher =0.14.1, =2.2.0, =2.3.2 - resoto-plugins 2.2.0 - runhouse 0.1.1 - trainyard 0.0.3 Source cves: CVE-2026-44405...

proxmox-pci-switcher (>=0.10.12, <=0.12.0), supercharged-cli (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-44405 via paramiko (2.10.2)

paramiko PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - proxmox-pci-switcher =0.10.12, =0.0.1, =0.0.11 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

SUSE CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

DEBIAN-CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...