Linux Distros Unpatched Vulnerability : CVE-2026-87517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy v...

Linux Distros Unpatched Vulnerability : CVE-2026-87641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromi...

KVM virt/kvm/eventfd.c Heap Buffer Overflow DoS

The vulnerability of the ioeventfdinrange function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-87615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HT...

PT-2026-88970

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An unauthenticated attacker with remote access can exploit a race condition, which occurs when a system's behavior depends on...

PT-2026-88954

PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire after views limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...

Linux Distros Unpatched Vulnerability : CVE-2026-87601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

ROS-20260909-73-0090

The vulnerability of the Extensions API in Google Chrome and Microsoft Edge browsers is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

CVE-2026-80916: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPTRT syzbot is reporting KCOV state corruption on PREEMPTRT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the per-CP...

MiracleLinux 8 : kernel-4.18.0-553.158.1.el8_10 (AXSA:2026-1794:77)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1794:77 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

Linux Distros Unpatched Vulnerability : CVE-2026-86422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or wri...

ROS-20260909-73-0105

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML pag...

Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the VMSVGA...

SUSE CVE-2026-80883

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.

Summary Argo CD is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2025-55191, CVE-2025-59531, CVE-2025-59537, CVE-2025-59538. Vulnerability Details CVEID:CVE-2025-55191 DESCRIPTION: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions...

firefox: Race condition, use-after-free in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics component...

EUVD-2026-67929

multer vulnerable to file size limit bypass via async fileFilter race condition...

GHSA-QVFW-J98X-7Q72 multer vulnerable to file size limit bypass via async fileFilter race condition

Impact When multer is configured with an asynchronous fileFilter, the limits.fileSize limit can be bypassed. The 'limit' event is registered inside the async fileFilter callback, so if a file exceeds limits.fileSize before that callback runs, the event is missed and the oversized upload is accept...

multer vulnerable to file size limit bypass via async fileFilter race condition

Impact When multer is configured with an asynchronous fileFilter, the limits.fileSize limit can be bypassed. The 'limit' event is registered inside the async fileFilter callback, so if a file exceeds limits.fileSize before that callback runs, the event is missed and the oversized upload is accept...

NPM: multer vulnerable to file size limit bypass via async fileFilter race condition

NPM: multer vulnerable to file size limit bypass via async fileFilter race condition vulnerability discovered by ? in WordPress Npm multer versions 2.3.0...