EUVD-2026-69703

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-84858

Name of the Vulnerable Software and Affected Versions UpSignOn for Windows versions prior to 7.19.0 Description Insecure credential storage allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering an authentication prompt. A standard...

PT-2026-84865

Name of the Vulnerable Software and Affected Versions Windows ML CLI versions prior to 0.4.0 Description The src/winml/modelkit/serve/cli api.py component exposes commands through a localhost HTTP API without authentication and uses a wildcard for the allow origins setting. This allows a maliciou...

MAL-2026-15814 Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows p...

Linux Distros Unpatched Vulnerability : CVE-2026-84637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executabl...

Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows p...

CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7...

CVE-2026-84334

CVE-2026-84334 is an incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows , prior to version 152.0.7977.75 . A local attacker can exploit it to execute arbitrary code outside the Chrome sandbox via a local program. The flaw was reported by Google on 2026-0...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84329

A confused deputy vulnerability in the CredentialProvider component of Google Chrome on Windows (prior to 152.0.7977.75 ) allowed a remote attacker who had already compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium rates the severity as Low ; the CVSS...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84351

CVE-2026-84351 is a buffer overflow in the GPU component of Google Chrome on Windows prior to 152.0.7977.75 . A remote attacker who had compromised the renderer process could exploit it via a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerability was rated High by Chr...