CVE-2026-70598

CVE-2026-70598 affects Electron: prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out‑of‑bounds memory while producing paint images, ...

CVE-2026-15920

A flaw was found in Django. The django.contrib.admin.utils.displayforfield function renders URLField values as clickable links in the administrative interface without proper validation. If an application persists URLField data containing an unsafe scheme without running model validation, a remote...

Cross-site Scripting (XSS)

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the displayforfield function. An attacker can execute arbitrary JavaScript code in the context of th...

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to insufficient input data validation, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

Chromium: CVE-2026-15131 Insufficient data validation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15123 Insufficient data validation in DOM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13871

An insufficient data validation flaw was found in the GuestView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497961376...

CVE-2026-13808

An insufficient data validation flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504221510...

CVE-2026-13881

An insufficient data validation flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499100491...

CVE-2026-13919

An insufficient data validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511249430...

CVE-2026-13911

An insufficient data validation flaw was found in the Spellcheck component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507239830...

CVE-2026-14100

An insufficient data validation flaw was found in the NetworkCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513383891...

CVE-2026-13962

An insufficient data validation flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513721370...

CVE-2026-14009

An insufficient data validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516819850...

CVE-2026-14128

An insufficient data validation flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514015836...

CVE-2026-14118

An insufficient data validation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513772764...

CVE-2026-15131

An insufficient data validation flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=526542464...

CVE-2026-15123

An insufficient data validation flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523729553...

USN-8611-1 glibc vulnerabilities

It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. CVE-2026-4046 It was discovered that the GNU C Library DNS functions incorrectly handled certain DNS server responses whe...