CVE-2026-79106: Improper Input Validation

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81635

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description Missing authorization allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact wi...

PT-2026-81894

Name of the Vulnerable Software and Affected Versions ClipBucket V5 affected versions not specified Description The web installer fails to properly validate or escape the php cli filepath parameter before passing it to shell execution. This allows unauthenticated attackers to submit a crafted POS...

CVE-2026-79093: Incorrect Authorization

Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79136: Incorrect Authorization

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79046: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81383

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170: Improper Authentication

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

Security Bulletin: NVIDIA Unified Fabric Manager - August 2026

NVIDIA has released a software update for NVIDIA® Unified Fabric Manager UFM. To protect your system, follow instructions to clone or update this software to version 6.24 or later from the UFM NVIDIA Application Hub. Go to NVIDIA Product Security. Details NVIDIA has released a software update for...

CVE-2026-16286: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2026-16638: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...

CVE-2026-79110: Missing Authorization

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79178: Incorrect Authorization

Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79184: Missing Authorization

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78946: Incorrect Authorization

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-81316

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2026-79251: Improper Input Validation

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79060: Incorrect Authorization

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78942: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78908: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...