CVE-2026-78939

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513261751...

CVE-2026-78945

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component could allow a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to potenti...

CVE-2026-78899

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540430406...

SUSE-SU-2026:23349-1 Security update for unbound

This update for unbound fixes the following issues: Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in libngtcp2 for DNS-over-QUIC environments with high concurrency bsc1271879. - CVE-2026-32665: Remote DNS-over-QUIC denial of service due to quic-size budget...

CVE-2026-79235

A flaw was found in WebGL within Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79232

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to exploit memory corruption by crafting a malicious HTML page. Successful exploitation can potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79219

A flaw was found in Google Chrome's Bluetooth component. This use-after-free vulnerability, a type of memory corruption, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering techniques and a specially...

CVE-2026-79224

A flaw was found in Chromecast within the Chromium browser. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing the victim to visit a specially crafted HTML...

CVE-2026-79202

A flaw was found in Chromecast within Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further syste...

CVE-2026-79198

A flaw was found in Google Chrome. This use-after-free vulnerability in the Platform component allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can bypass security restrictions and run malicious code within the browser's...

CVE-2026-79200

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...

CVE-2026-79187

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the WebRTC component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to...

CVE-2026-79194

A flaw was found in Chromoting, a component within Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a remote attacker sends specially crafted network traffic to a vulnerable...

CVE-2026-79183

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the Accessibility component of Google Chrome, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation requires social engineering and user interaction with...

CVE-2026-79149

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-79150

A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to significant security compromise...

CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79097

A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the sandbox environment, potentially leading to a compromise of the affected...

RLSA-2026:60004 Low: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 For more details about the securit...

httpd security update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...