GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: external-dns, osv-scanner, cilium, prometheus-fips, kubescape, frankenphp-8.5, kine, kube-arangodb-fips, zitadel, kuma, traefik-fips, frankenphp-8.4, tigera-operator, gitlab-kas, mattermost-fips, frankenphp-8.2, terraform, trivy-operator-fips, chisel-fips, k3s, loki,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-dns, osv-scanner, cilium, prometheus-fips, kubescape, frankenphp-8.5, kine, kube-arangodb-fips, zitadel, kuma, traefik-fips, frankenphp-8.4, tigera-operator, gitlab-kas, mattermost-fips, frankenphp-8.2, terraform, trivy-operator-fips, chisel-fips, k3s, loki,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: trufflehog-fips, crossplane-provider-azure-operationsmanagement, external-dns, mapotf-fips, chainctl, argo-events, chainctl-fips, cilium, osv-scanner, syft-fips, grype-db, tkn, crossplane-provider-azure-streamanalytics, gomplate, crossplane-provider-azure-search,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, external-dns, osv-scanner, chainctl, argo-events, chainctl-fips, cilium, syft-fips, grype-db, gomplate, podman, prometheus-fips, kubescape, longhorn-cli-fips, frankenphp-8.5, kine, kube-arangodb-fips, syft, zitadel, terragrunt, kuma, act, traefik-fip...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: trufflehog-fips, external-dns, osv-scanner, chainctl, argo-events, chainctl-fips, cilium, syft-fips, grype-db, gomplate, podman, prometheus-fips, kubescape, longhorn-cli-fips, frankenphp-8.5, kine, kube-arangodb-fips, syft, zitadel, terragrunt, kuma, act, traefik-fip...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, external-dns, osv-scanner, chainctl, argo-events, chainctl-fips, cilium, syft-fips, grype-db, gomplate, podman, prometheus-fips, kubescape, frankenphp-8.5, kine, kube-arangodb-fips, syft, zitadel, terragrunt, kuma, act, traefik-fips, frankenphp-8.4,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trufflehog-fips, crossplane-provider-azure-operationsmanagement, external-dns, mapotf-fips, chainctl, argo-events, chainctl-fips, cilium, osv-scanner, syft-fips, grype-db, tkn, crossplane-provider-azure-streamanalytics, gomplate, crossplane-provider-azure-search,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: istio, flux-source-controller, kaf, loki, minio, flux-image-automation-controller, kine, argocd-image-updater, kubernetes-dashboard, osv-scanner, kubescape, cilium, k9s, cloud-provider-aws, spire-server, trivy-operator, vitess, argo-cd, external-dns, kots, telegraf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, osv-scanner, cilium, cloud-provider-aws, buildah, telegraf, cluster-api-azure-controller, gitlab-runner, gh, external-secrets-operator, wolfictl, helm, flux-kustomize-controller, pulumi-kubernetes-operator, scorecard, syft, terragrunt, guac, aactl, eksctl,...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the Updater component of Google Chrome prior to version 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation through a malicious file. Chromium security severity: High...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...