SUSE CVE-2026-100830

Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-102315

An uninitialized resource flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563351482 https://code.google.com/p/chromium/issues/detail?id=102315...

CVE-2026-102306

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556926296 https://code.google.com/p/chromium/issues/detail?id=102306...

CVE-2026-102301

An out of bounds write flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562004351 https://code.google.com/p/chromium/issues/detail?id=102301...

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029

Summary IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 because of CR author can redirect arcgis-admin RoleBinding to own ServiceAccount, CR author can override...

CVE-2026-95316

An unchecked return value flaw was found in the Performance component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/552023752...

CVE-2026-95319

An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523765972...

CVE-2026-95324

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537857253...

CVE-2026-95308

An integer overflow flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513714849...

CVE-2026-95355

An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/508462481...

CVE-2026-95335

An use after free flaw was found in the HID component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555299641...

CVE-2026-95299

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561997427...

CVE-2026-95293

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550953039...

CVE-2026-95312

An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/547832510...

CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-95348

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554558320...

CVE-2026-95351

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562242429...

CVE-2026-95311

A free of non-heap memory flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553123003...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

Malware in @hrmony/component-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...