CVE-2026-84335

An incorrect authorization flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522302504 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-84328

A missing authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498710886 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

Linux Distros Unpatched Vulnerability : CVE-2026-84335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged...

CVE-2026-84329

A confused deputy vulnerability in the CredentialProvider component of Google Chrome on Windows (prior to 152.0.7977.75 ) allowed a remote attacker who had already compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium rates the severity as Low ; the CVSS...

CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

MAL-2026-15832 Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e369cb173ca8757829b6cb54f1d3e63c8b8baacb1f22241092a5a1032779d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15831 Malicious code in @viertechjs/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e369cb173ca8757829b6cb54f1d3e63c8b8baacb1f22241092a5a1032779d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a35c7b86ec1a4d9922b7c74dbdab948b868f8cf43a8f5c01053692e6a85803 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15830 Malicious code in @viertechjs/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a35c7b86ec1a4d9922b7c74dbdab948b868f8cf43a8f5c01053692e6a85803 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

EUVD-2026-66359

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-73725

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73721

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

CVE-2026-73716

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73717

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73712

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

CVE-2026-73701

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-73702

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete system compromise...