GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: syft, nerdctl, kubescape-server, atlantis-fips, crossplane-provider-azure-policyinsights, mods, crossplane-provider-azure-operationsmanagement, argo-workflows-fips, crossplane-provider-azure-storagesync, flux-source-controller, frankenphp-8.3,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: syft, nerdctl, kubescape-server, flux-source-controller, argo-workflows-fips, frankenphp-8.3, elastic-agent-fips, cloudbeat-fips, helm, redpanda-console, fscrypt, gitlab-kas, grype, jfrog-cli, k9s, knative-serving-fips, prometheus, chezmoi, trivy-operator-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: syft, nerdctl, kubescape-server, flux-source-controller, argo-workflows-fips, frankenphp-8.3, elastic-agent-fips, cloudbeat-fips, helm, redpanda-console, fscrypt, gitlab-kas, rootlesskit-fips, grype, jfrog-cli, k9s, knative-serving-fips, prometheus, peerdb-flow,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: wal-g, cloud-provider-aws, flux, neuvector-sigstore-interface, gomplate, kaf, trivy, mods, telegraf, glab, cluster-api-azure-controller, aactl, cilium, kargo, argo-events, chisel, k9s, gitlab-runner, ksops, slsa-verifier, zarf, fscrypt, podman, gitea, istio, openbao,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, snyk-cli, mattermost, cert-manager, flux, prometheus-operator, kubernetes-dashboard, nerdctl, prometheus, kaf, flux-source-controller, trivy-operator, trivy, kyverno, telegraf, argocd-image-updater, zot, k3s, aactl, spire-server, falco-no-driver,...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

KLA91111 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, inject malicious code, cause denial of service, perform cross-site scripting attack, obtain sensitive information...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

A race condition in the Updater component of Google Chrome on macOS (prior to version 149.0.7827.155) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape . This can be achieved by the attacker using a crafted HTML page . Remediation is available i...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...