EUVD-2026-106136

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Project Control. Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier...

Linux Distros Unpatched Vulnerability : CVE-2026-113057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page...

Linux run_get_highest_vcn() Data Compromise

The vulnerability of the rungethighestvcn function in the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux CIFS misc Component Data Compromise

The vulnerability of the fs/cifs/misc.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

WebUI DoS

The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Import component of Google Chrome and Microsoft Edge web browsers is related to access control errors. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted file...

Speech Component Access Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Linux arch/arm64/include/asm/exception.h Data Compromise

The vulnerability of the arch/arm64/include/asm/exception.h component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...

Google Chrome Microsoft Edge Data Compromise

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247

This module enables you to generate and serve WebP derivatives of image style images, overriding Drupal core's image style download controller to serve them. The module serves WebP image derivative responses with the HTTP header Cache-Control: public for all file schemes other than the private fi...

PT-2026-120919

This module allows for direct viewing of a file with the URL alias. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This can lead to some users getting cached versions of files with information they should not be able to access. This...

PT-2026-120924

Rabbit Hole lets site builders control what happens when an entity's page is viewed: show it, return an access denied or not found response, or redirect the visitor to another URL. The module has two vulnerabilities. Rabbit Hole behavior can be skipped with a specific query parameter. In these...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Google Chrome Microsoft Edge DoS

The vulnerability in the Linux Toolkit Theming component of Google Chrome and Microsoft Edge web browsers is related to improper access control. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome ServiceWorker Data Compromise

The vulnerability in the ServiceWorker interface of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Permissions Bypass

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

Linux rpc_rdma Component Failure

The vulnerability in the net/sunrpc/xprtrdma/rpcrdma.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-120920

This module enables you to generate and serve WebP derivatives of image style images, overriding Drupal core's image style download controller to serve them. The module serves WebP image derivative responses with the HTTP header Cache-Control: public for all file schemes other than the private fi...

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

This module allows for direct viewing of a file with the URL alias. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This can lead to some users getting cached versions of files with information they should not be able to access. This...

PT-2026-120869

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...