PT-2026-66291

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

PT-2026-66609

Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn ships with default C2 credentials in payload.json and core/payload schema.py, which are passed unchanged to lazyc2.py for HTTP Basic authentication. This allows a...

PT-2026-66157

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An issue in the security user interface allows a remote attacker to perform domain spoofing, which is the act of disguising a website to make it appear as another trusted domain,...

PT-2026-66210

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66071

Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66171

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Media Router allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script load...

PT-2026-66315

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

PT-2026-66599

Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description Improper access control allows an unauthorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-66432

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum, which is a non-cryptographic error-detection code, without...

PT-2026-66141

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description A race condition in the browser allows a remote attacker to perform UI spoofing by using a specially crafted HTML page. UI spoofing is a technique where an attacker mimics a...

PT-2026-66617

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description A heap use-after-free issue exists in the TransferSubscriptions service. This occurs when the application continues to use a pointer after the memory it points to has been freed, which may...

PT-2026-66259

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

Siemens SIMATIC Observable Discrepancy (CVE-2023-37482)

The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. The login functionality of the web server in affected devices does not normalize the response times of login attempts. An...

The vulnerability of the smb2_get_ea() function in the fs/smb/server/smb2pdu.c file of the Smb file system in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smb2getea function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

PT-2026-66104

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66327

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

PT-2026-66121

Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-66332

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-17988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...