PT-2026-107049

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106405: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

CVE-2026-106213: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 (CVE-2026-94583)

: A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable an...

A race condition vulnerability exists in the web management daemon on Brocade Fabric OS versions before 10.0.1 (CVE-2026-94584)

: A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...

PT-2026-107260

A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...

PT-2026-106634

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx setup arms the stats poll before mxl862xx setup mdio, and nothing stops it until dsa register switch has returned an error to mxl862xx probe. DSA frees the dsa port...

PT-2026-107084

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-106644

In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfs non resident attr shrink calls runlist helpers that require the runlist write lock, but did not hold it while freeing clusters and truncating the runlist. Serialize those...

PT-2026-106580

In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovs ct get conn labels adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may...

PT-2026-106645

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix race between rawmidi and disconnect Although we tried to fix the potential UAF issues at USB disconnect on bcd2000 driver, there is still an overlooked case -- namely, when a rawmidi trigger callback has been...

PT-2026-106676

In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER UP after multicast flush ipoib ib dev flush light temporarily clears IPOIB FLAG OPER UP to prevent multicast joins while ipoib mcast dev flush is running, and restores the flag afterwards if it was...

PT-2026-106560

In the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush The deferred-device pass in xfrm dev state flush finds states under xfrm state dev gc lock, but drops the lock before calling xfrm dev state free because the driver callback may...

Linux Distros Unpatched Vulnerability : CVE-2026-98276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lock the socket in sockgettstamp sk-skflags must only be changed while holding the socket lock, because socksetflag and sockresetflag use non atomic...

Linux Distros Unpatched Vulnerability : CVE-2026-98316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: bcd2000: Fix race between rawmidi and disconnect Although we tried to fix the potential UAF issues at USB disconnect on bcd2000 driver, there is still an...

Linux Distros Unpatched Vulnerability : CVE-2026-98251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels extension when a conntrack entry does not have one. Confirmed...

PT-2026-106626

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Fix queuing tx work after workqueue is drained hci send acl, hci send sco and hci send iso queue hdev-tx work unconditionally. They can run from the L2CAP/SCO/ISO socket send path while hci dev close sync is...

PT-2026-106928

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-107077

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

PT-2026-106888

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...