SUSE CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

MINI-6PMF-RWXH-QFRX

Bulletin has no description...

MINI-5FR4-VP4Q-Q399

Bulletin has no description...

MINI-PMJG-88PF-MQH7

Bulletin has no description...

MINI-G9GX-H8J5-X3G8

Bulletin has no description...

MINI-RXP4-G7P7-G8QH

Bulletin has no description...

CGA-JVQM-7R6W-JX8H

Bulletin has no description...

MINI-9XHJ-M2GP-QWJW

Bulletin has no description...

MINI-4FXP-M3H4-RHH3

Bulletin has no description...

MINI-85J2-QXHX-24H6

Bulletin has no description...

MINI-7C23-R4MG-Q24W

Bulletin has no description...

MINI-4JW7-P4JV-M4C4

Bulletin has no description...

MINI-3HH6-7XW5-X8CJ

Bulletin has no description...

MINI-6VMF-W8PM-3Q3P

Bulletin has no description...

MINI-J92J-R4GV-6HRP

Bulletin has no description...

CVE-2026-8795

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in clientinfo.json inside a collection ZIP is inserted into a YAML template via Go's text/template without escaping. An attacker providing a crafted...

MINI-RJWV-JCPP-FW66

Bulletin has no description...

EUVD-2026-35274

Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-35262

Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-35270

Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...