CLEANSTART-2024-UI36748 Use after free in Accessibility in Google Chrome prior to 91

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 91...

CLEANSTART-2024-AL06314 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

CLEANSTART-2024-NZ14344 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2026_9683)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269683 advisory. JDK: Enhance crypto algorithm support CVE-2026-22007 JDK: Improve Kerberos credentialing CVE-2026-22013 JDK: Enhance Path Factories Redux CVE-2026-22016 JD...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1749481242)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1749481242 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1753982295)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1753982295 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1753374348)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1753374348 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

"I'm Trying Not to Get Hacked:" How Adults with Intellectual and Developmental Disabilities Navigate Security and Privacy Notifications

Security and privacy notifications, such as login alerts, spam email warnings, and cookie consent requests, play a critical role in shaping users' responses to digital risks. Yet most notifications overlook cognitive accessibility, limiting their effectiveness for people with intellectual and...

CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1745587859)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1745587859 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 8.6 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0065)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260065 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 8.6. It addresses 16 CVEs: CVE-2024-21011, CVE-2024-21131,...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1745588191)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1745588191 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1753374017)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1753374017 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

rxgk_extract_token Heap Buffer Overflow DoS

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, stems from an improper check on the returned value by this function. Exploiting this vulnerability could allow a remote attacke...

ROS-20260930-73-0074

The vulnerability of the rxrpcrecvmsg function in the net/rxrpc/recvmsg.c module, which supports RxRPC session sockets in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Crosswork Data Gateway SQL Injection

The vulnerability of the Crosswork Data Gateway data collection platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Cisco Secure Workload protection Multi-cloud Data Center Input Validation

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of t...

Crosswork Data Gateway Data Compromise

The vulnerability of the Crosswork Data Gateway data collection platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected informati...

mtk_jpeg_release Heap Buffer Overflow DoS

The vulnerability of the mtkjpegrelease function in the drivers/media/platform/mediatek/jpeg/mtkjpegcore.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacke...

Linux USB Device Driver RNDIS Buffer Overflow

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

Crosswork Data Gateway Path Traversal

The vulnerability of the Crosswork Data Gateway data collection platform is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...