ROS-20260910-73-0102

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0095

The vulnerability of the SplitView component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0020

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows a malicious actor to manipulate data integrity via a specially crafted HTML page...

ROS-20260910-73-0037

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the u...

ROS-20260910-73-0035

The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service interruptions through the use of a...

ROS-20260910-73-0119

The vulnerability of the SVG component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

CVE-2026-86768

Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targets. Attackers can submit POST requests to hardware, component, or consumable checkout endpoints with soft-deleted use...

CVE-2026-86739 Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence

Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put when writing the signature PNG and the generated acceptance PDF in Account\AcceptanceController::store. On filesystem drivers that return false instead of throwing on a write failure for example the local disk with restricti...

CVE-2026-86739 Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence

Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put when writing the signature PNG and the generated acceptance PDF in Account\AcceptanceController::store. On filesystem drivers that return false instead of throwing on a write failure for example the local disk with restricti...

CVE-2026-59643

A flaw was found in Bouncy Castle for Java and Bouncy Castle for Java FIPS BC-FJA. This vulnerability allows an attacker to bypass OpenPGP inline-signature policy failures, which are silently ignored by the software. This silent disregard of policy failures can lead to a compromise of data...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

ROS-20260909-73-0169

The vulnerability of the WebAppInstalls component in the Google Chrome web browser relates to bypassing authentication through spearphishing. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially crafted HTML page...

ROS-20260909-73-0168

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260909-73-0122

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created PDF file...

ROS-20260909-73-0129

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the snp_begin_psc() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the snpbeginpsc function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

ROS-20260909-73-0052

The vulnerability of the WebGL component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

ROS-20260909-73-0070

The vulnerability in Chromium is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

ROS-20260909-73-0166

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service interruptions...

CVE-2026-87061

A flaw was found in olm-operator-konflux-sample. The bundle-hack/updatebundle.sh script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving skopeo or jq commands, to fail silently and proceed with...