Linux um_tlb_sync Heap Buffer Overflow DoS

The vulnerability of the umtlbsync function in the arch/um/kernel/tlb.c module of the Linux operating system is related to the lack of lock checking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel BPF Core Parse Spec

The vulnerability of the bpfcoreparsespec function in the tools/lib/bpf/relocore.c file of the Linux operating system’s kernel is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta and can give operators near-complete control of infected devices. ThreatFabric said the campaign's...

Data Compromise Component Confidential

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially created HTML pag...

ROS-20260901-73-0036

The vulnerability of the RedisArrayAggregator component in the framework for developing network applications, servers, and client protocols based on Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the accessibilit...

Google Chrome Data Compromise

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

Linux kernel Cryptographic Subsystem Heap Buffer Overflow DoS

The vulnerability of the aeadrecvmsg function in the crypto/algifaead.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the comedideviceattach function in the drivers/comedi/drivers.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Chromium: CVE-2026-79183 Use after free in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79175 Type confusion in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260828-73-0017

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

ATBroker Privilege Escalation

The vulnerability of the ATBroker.exe process responsible for registering auxiliary technologies in the Windows Accessibility Infrastructure affects Windows operating systems. This vulnerability is related to incorrect handling of symbolic links before accessing the file. Exploiting this...

SUSE CVE-2026-79175

Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-79183

Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-79175

A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79183

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the Accessibility component of Google Chrome, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation requires social engineering and user interaction with...

Beware of fake Indeed interview apps used to install spyware

From several independent reports, we’ve seen evidence of scammers using fake Android “interview” apps to target job seekers on the Indeed platform. Indeed is one of the world's largest employment websites, giving scammers access to a huge pool of potential victims, especially in a competitive job...

Linux Distros Unpatched Vulnerability : CVE-2026-79183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outsid...

Linux Distros Unpatched Vulnerability : CVE-2026-79175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to...