CVE-2026-87436

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an incomplete cleanup vulnerability in the browser. This could allow the attacker to bypass the web origin policy through a specially crafted extension, potentially leading to unauthorized access to...

CVE-2026-89623: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cannot race with hardware teardown during probe failure or device removal...

PT-2026-90342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid sensor custom add attributes function where the system fails to clean up sysfs groups if sysfs create group fails after some groups have already been created...

PT-2026-90288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the apple-soc component of the cpufreq subsystem where the apple soc cpufreq init function adds Operating Performance Point OPP tables from firmware but fails to remov...

PT-2026-90339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID mcp2221 driver. The problem occurs because incoming HID reports can race with hardware teardown during device removal or probe failure. This is...

PT-2026-90313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev uvesafb component where the uvesafb init function registers the v86d connector callback before registering the platform driver. If the platform driver regist...

PT-2026-90307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/rocket component where the rocket ioctl submit job function releases rjob via rocket job put during allocation error paths. Because rocket job cleanup...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...

PT-2026-90191

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq24257 power supply driver. The STAT-pin interrupt is managed by devm, meaning it remains active until the devm cleanup process occurs after the...

PT-2026-90259

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sunrpc component. The mount-event path in the rpc clnt handle event function calls rpc setup pipedir sb directly without refreshing the clnt-pipefs s...

PT-2026-90374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during the cleanup of revoked states in NFSv4.0. The function nfs40 clean admin revoked takes a stateid reference while holding the clp-...

Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...

CVE-2026-88860 Capgo Authorization Bypass via Stale Channel Permission Overrides

Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...