CVE-2026-100820

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CLSA-2026-1790677530 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 7.1.0-tuxcare.2...

CLSA-2026-1790676837 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.4...

CVE-2026-97571

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. The driver does not properly handle memory allocation failures when configuring Transparent Packet Aggregation TPA buffers, leaving partially initialized ring buffers active. When memory allocation fails, an...

CLEANSTART-2026-JM61604 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-AQ64279 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-VL04075 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-101912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in...

CVE-2026-102264: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95323): chromium -- security fixes

UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-102845

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description A UI misrepresentation in the Omnibox allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update to version 154.0.8037.92 or later...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95279): chromium -- security fixes

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95291): chromium -- security fixes

UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95320): chromium -- security fixes

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95320: Missing Authorization

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95279: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95291: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

CVE-2026-102312: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

CVE-2026-100820: Improper Privilege Management

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

Amazon Linux 2 : rclone (ALAS-2026-3947)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3947 advisory. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the...