26259 matches found
PT-2026-88963
TL;DR. The FortiPAM Chrome extension 1M+ users, used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks whi...
Linux Distros Unpatched Vulnerability : CVE-2026-87441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome...
Linux Distros Unpatched Vulnerability : CVE-2026-87591
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrom...
Linux Distros Unpatched Vulnerability : CVE-2026-87504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...
Linux Distros Unpatched Vulnerability : CVE-2026-87461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross- origin data via a crafted Chrome extension. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-87436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...
Linux Distros Unpatched Vulnerability : CVE-2026-87561
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome...
Linux Distros Unpatched Vulnerability : CVE-2026-87447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy v...
Linux Distros Unpatched Vulnerability : CVE-2026-87431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome...
Linux Distros Unpatched Vulnerability : CVE-2026-87450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive...
TencentOS Server 3: sqlite (TSSA-2026:0995)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0995 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-87511
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension...
heartbleed
HEARTBLEED : VULNERABILIDAD HEARTBLEED DE OpenSSL TLS Extensión Heartbeat de OpenSSL TLS - Divulgación de memoria - Escáner y exploit de vulnerabilidad para múltiples versiones SSL/TLS necesita: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre...
CVE-2026-70351
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-69881
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69649
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-69587
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69582
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...