Astra Linux – Vulnerability in Chromium

Missing authorization in the ServiceWorker in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the USB setting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The race condition in the browser of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in the Browser of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-97181

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

EUVD-2026-85814

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181

The GPM LIGHT software developed by ezGlobal contains a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs , potentially leading to the disclosure of sensitive information. No specific version numbers, root causes, or remediation steps are prov...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

Eufy Omni C20, Omni X10 Pro

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194

Summary An unauthenticated attacker on the BMC's local network can cause loss of service. Vulnerability Details CVEID:CVE-2026-52943 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers...

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. id: CVE-2018-15961 info: name: Adobe ColdFusion - Unrestricted File Upload...

CVE-2026-93818

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...

CVE-2026-93819

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

PT-2026-97725

Name of the Vulnerable Software and Affected Versions GPM LIGHT affected versions not specified Description Unauthenticated remote attackers can directly access system logs, leading to sensitive data exposure. Recommendations At the moment, there is no information about a newer version that...

PT-2026-97789

Name of the Vulnerable Software and Affected Versions Netlink ICT HG323RW affected versions not specified Description Insufficient authorization and input validation controls in the diagnostic script import functionality allow an authenticated attacker to upload and execute a specially crafted...