PT-2026-120540

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

PT-2026-120760

Name of the Vulnerable Software and Affected Versions Apache Pulsar Manager versions 0.1.0 through 0.4.0 Description Apache Pulsar Manager contains several security flaws. The process for creating the initial administrator account is accessible without authentication and remains available after...

Linux Distros Unpatched Vulnerability : CVE-2026-113030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-113057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-113159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HT...

Protection Is Not One Event: A Survey of RAG Protection Research by Measured Endpoint

Retrieval-augmented generation RAG systems face security, privacy, and copyright risks including content leakage, source reconstruction, unauthorized access, data poisoning, and prompt injection. Yet RAG protection studies use incompatible evaluation metrics, datasets, and threat models. We prese...

Google Chrome Microsoft Edge DoS

The vulnerability in the Linux Toolkit Theming component of Google Chrome and Microsoft Edge web browsers is related to improper access control. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Import component of Google Chrome and Microsoft Edge web browsers is related to access control errors. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted file...

CVE-2020-37288: Always-Incorrect Control Flow Implementation

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Speech Component Access Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Edge Data Compromise

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information...

Google Chrome Microsoft Edge Access Information

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to gain access to protected information...

Google Chrome Microsoft Edge Data Compromise

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Permissions Bypass

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

Linux rpc_rdma Component Failure

The vulnerability in the net/sunrpc/xprtrdma/rpcrdma.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux run_get_highest_vcn() Data Compromise

The vulnerability of the rungethighestvcn function in the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

WebUI DoS

The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...