PT-2026-84654

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A heap-use-after-free occurs when using libcurl's multi interface with OpenSSL 3 provider configurations. The issue arises because libcurl attaches an allocated library context to the easy...

Linux Distros Unpatched Vulnerability : CVE-2026-84641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to...

Linux Distros Unpatched Vulnerability : CVE-2026-84124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbi...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allow...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 all...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowe...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7...

Linux Distros Unpatched Vulnerability : CVE-2026-84118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-84350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

RockyLinux 8 : nodejs:24 (RLSA-2026:62583)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62583 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Linux Distros Unpatched Vulnerability : CVE-2026-84119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15,...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to bypass security measures.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to escape from the sandbox environment by using a specially created HTML page...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

UBUNTU-CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory dis...

Oracle Linux 9 : ELSA-2026-60224-0: / pam (ELSA-2026-602240)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-602240 advisory. 1.5.1-28.0.1.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-28.1 - pamuserdb: fix password comparison timing leak. Resolves:...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84350

CVE-2026-84350 is a use-after-free in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Low , while the assi...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...