CVE-2026-102306

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556926296 https://code.google.com/p/chromium/issues/detail?id=102306...

CVE-2026-102301

An out of bounds write flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562004351 https://code.google.com/p/chromium/issues/detail?id=102301...

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029

Summary IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 because of CR author can redirect arcgis-admin RoleBinding to own ServiceAccount, CR author can override...

CVE-2026-95316

An unchecked return value flaw was found in the Performance component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/552023752...

CVE-2026-95319

An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523765972...

CVE-2026-95324

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537857253...

CVE-2026-95308

An integer overflow flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513714849...

CVE-2026-95355

An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/508462481...

CVE-2026-95335

An use after free flaw was found in the HID component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555299641...

CVE-2026-95299

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561997427...

CVE-2026-95293

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550953039...

CVE-2026-95312

An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/547832510...

CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-95351

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562242429...

CVE-2026-95348

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554558320...

CVE-2026-95311

A free of non-heap memory flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553123003...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-100242

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

Malicious code in @hrmony/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...

MAL-2026-17259 Malicious code in @hrmony/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...