CVE-2026-106382

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 a...

CVE-2026-106393

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allo...

CVE-2026-106411

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow...

CVE-2026-106421

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed...

CVE-2026-106423

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe...

CVE-2026-106190

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe...

CVE-2026-106318

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe...

CVE-2026-106426

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe...

CVE-2026-106268

Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow...

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe...

PT-2026-107698

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Description A low-privileged user without admin or power roles can retrieve the original source code for the...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-82531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocachehash is never restored during extends:/multi-compone...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An...

Linux Distros Unpatched Vulnerability : CVE-2026-106228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Adobe Animate 23.x < 23.0.17 / 24.x < 24.0.15 Code Injection (APSB26-132)

The version of Adobe Animate installed on the remote host is 23.x prior to 23.0.17, or 24.x prior to 24.0.15. It is, therefore, affected by a code injection vulnerability as referenced in the apsb26-132 advisory. - Animate is affected by an Improper Control of Generation of Code 'Code Injection'...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791391794)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791391794 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTT...

Linux Distros Unpatched Vulnerability : CVE-2026-102322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page...