CLSA-2026-1792611813 php: Fix of 2 CVEs

CVE-2026-109618: fix code execution via state corruption after an out-of-memory error GHSA-w8hw-w9fx-j79w - CVE-2026-109619: fix code execution via stale global state between requests GHSA-6wmf-4rv5-p3rp...

cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

php2shell-poc

PHP2Shell 🔬 Two PHP vulnerabilities. One evidence trail...

CVE-2026-112408

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408

The Amazon SageMaker Python SDK is vulnerable to a flaw in the default_bucket() function, where the SDK fails to verify the ownership of S3 buckets. Specifically, versions V3 before 3.10.0 and V2 before 2.257.3 do not validate the source of the communication channel, allowing a remote actor to ac...

EUVD-2026-107541

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-114125

A flaw was found in Storybook. Due to insufficient iframe embedding and message-origin restrictions, a remote attacker can achieve arbitrary code execution if a developer running a local development server visits a malicious website. By tricking the developer into interacting with an injected...

CVE-2026-114126

A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...

CVE-2026-113005

A flaw was found in chromium-browser. A memory corruption vulnerability in the Bluetooth component allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment. To exploit this flaw, an attacker must entice a user into visiting a specially crafted HTML pa...

CVE-2026-113012

A flaw was found in chromium-browser. Improper input validation within the Graphics Processing Unit GPU component allows a remote attacker to potentially execute arbitrary code inside the browser's sandbox. An attacker could exploit this vulnerability by convincing a user to load a specially...

CVE-2026-113007

A flaw was found in chromium-browser. A memory corruption vulnerability in the Permissions component allows a remote attacker to execute arbitrary code outside the sandbox, which is an isolated security boundary designed to restrict untrusted programs. By convincing a user to open a specially...

CVE-2026-112997

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Cascading Style Sheets CSS engine by enticing a user to load a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbo...

CVE-2026-113000

A flaw was found in the Paint component of Chromium. A remote attacker could exploit this vulnerability by convincing a user to open a specially crafted HTML page, triggering memory corruption during rendering. Successful exploitation allows the attacker to execute arbitrary code inside the...

CVE-2026-113004

A flaw was found in chromium-browser. A memory corruption vulnerability in the Sync component allows a remote attacker to achieve arbitrary code execution inside the browser's restricted security environment sandbox. An attacker can exploit this issue by enticing a user to visit a specially craft...

CVE-2026-113008

A flaw was found in the Transactions Platform in Google Chrome. A remote attacker can exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-112999

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution inside the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This issue stems from a use-after-free vulnerability in an application programming interface API, where...

CVE-2026-113003

A flaw was found in the Human Interface Device HID component of Chromium. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to execute arbitrary code within the browser sandb...