CVE-2026-95316

An unchecked return value flaw was found in the Performance component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/552023752...

CVE-2026-95319

An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523765972...

CVE-2026-95324

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537857253...

CVE-2026-95308

An integer overflow flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513714849...

CVE-2026-95355

An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/508462481...

CVE-2026-95335

An use after free flaw was found in the HID component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555299641...

CVE-2026-95299

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561997427...

CVE-2026-95293

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550953039...

CVE-2026-95312

An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/547832510...

CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-95348

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554558320...

CVE-2026-95351

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562242429...

CVE-2026-95311

A free of non-heap memory flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553123003...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

Malware in @hrmony/component-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-100242

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

MAL-2026-17259 Malicious code in @hrmony/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...

Malicious code in @hrmony/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...

CVE-2026-100308

The Amazon GluonTS library is vulnerable to arbitrary command execution in versions prior to 0.17.0 . The root cause is the deserialization of untrusted data within the model loading component, which may allow context-dependent attackers to execute OS commands with the privileges of the loading p...

CVE-2026-86035 Weblate: Mercurial argument injection via repository filenames allows authenticated command execution

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...