GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, splunk-otel-collector-fips, zarf, flux-fips, frankenphp-8.4, flux-source-controller-fips, argo-events, gitea, gitlab-rails-ce-fips, mattermost-fips, prometheus-elasticsearch-exporter, kuma, kubescape, nerdctl, podman, grype, cilium,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, splunk-otel-collector-fips, zarf, flux-fips, frankenphp-8.4, flux-source-controller-fips, argo-events, gitea, gitlab-rails-ce-fips, mattermost-fips, prometheus-elasticsearch-exporter, kuma, kubescape, nerdctl, podman, grype, cilium,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, splunk-otel-collector-fips, teleport, zarf, crossplane-provider-azure-web, flux-fips, frankenphp-8.4, cluster-api-azure-controller, prometheus-elasticsearch-exporter, tekton-chains-fips, vault-benchmark, flux-source-controller-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, splunk-otel-collector-fips, teleport, zarf, crossplane-provider-azure-web, flux-fips, frankenphp-8.4, cluster-api-azure-controller, prometheus-elasticsearch-exporter, tekton-chains-fips, vault-benchmark, flux-source-controller-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes, prometheus, mattermost, zot, helm, cert-manager, kubescape, minio, spire-server, zarf, kubernetes-dashboard, flux-image-automation-controller, loki, kaf, gitea, osv-scanner, fscrypt, chisel, trivy-operator, skaffold, k9s, argocd-image-updater, aactl,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, helm, minio, docker, opentofu, loki, tflint, nfpm, crossplane-provider-azure-authorization, caddy, fulcio, terragrunt, aactl, nerdctl, pulumi-language-dotnet, crossplane-provider-azure-storage, trivy, kots, rootlesskit, k3s, step-kms-plugin, flux, melange,...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-50218

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.155 Description A race condition in the Updater allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved through the use of a...

AMD Auto Updater Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-40677| The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.| 7.7...