GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: calico-fips, kaf, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, argo-events-fips, spire-server, upwind-agent, skaffold-fips, trufflehog-fips, trivy-operator, argo-cd-fips, minio-fips, packer-fips, amazon-ssm-agent, terraform, chainctl-fips, kine,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: calico-fips, kaf, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, argo-events-fips, juicefs, spire-server, docker-machine-driver-harvester, skaffold-fips, trufflehog-fips, upwind-agent, trivy-operator, argo-cd-fips, minio-fips, packer-fips, amazon-ssm-agent,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, age, flux, splunk-otel-collector,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, spire-server, nerdctl, kubernetes-dashboard, chisel, kine, cilium, mattermost, argocd-image-updater, prometheus, fscrypt, kaf, k3s, skaffold, istio, prometheus-operator, knative-serving, flux-source-controller, kyverno, gitea, containerd, kubernetes, cilium-cl...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-50218

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.155 Description A race condition in the Updater allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved through the use of a...

AMD Auto Updater Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-40677| The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.| 7.7...

CVE-2026-11115

An use after free flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501370283...

SUSE CVE-2026-11115

Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...