PT-2026-80725

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description An issue exists where libssh incorrectly performs bounds checking when processing SFTP extensions. If a client application queries extension data out of bounds, it can lead to an application...

Microsoft Edge (Chromium) < 151.0.4129.86 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 14, 2026 advisory. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execu...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102006 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp...

ANT-2026-1ZNMP148 · NSS · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-6772 GHSA-c2q7-642g-3vwr Severity Claude medium · Security research firm medium · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-1ZNMP148:...

glassworm-hunter v1.0.4

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101140 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21581-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21581-1 advisory. Changes in chromium: - Chromium 151.0.7922.137 boo1274759: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21581-1 Rating: important References: bsc1274759 Cross-References: CVE-2026-19556 CVE-2026-19557 CVE-2026-19558 CVE-2026-19559 CVE-2026-19560...

OPENSUSE-SU-2026:21581-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 151.0.7922.137 boo1274759: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip CVE-2026-19558: Use after free in Extensions CVE-2026-19559: Use after free in HTML CVE-2026-19560: Use...

Fedora 43 : chromium (2026-51e9d3c767)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51e9d3c767 advisory. chromium security release 151.0.7922.137 inludes fixes for: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Fedora 44 : chromium (2026-c374680c6a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c374680c6a advisory. chromium security release 151.0.7922.137 inludes fixes for: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Chromium: CVE-2026-19558 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0284-1 Rating: important References: 1274759 Cross-References: CVE-2026-19556 CVE-2026-19557 CVE-2026-19558 CVE-2026-19559 CVE-2026-19560 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes ...

KLA91222 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in V8 can be exploite...

CVE-2026-19165

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, by convincing a user to install a malicious extension, to execute arbitrary code within the browser's sandbox. This could lead to further compromise of the user's system...

737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traffic and route them through a proxy infrastructure. The extensions, published across at least 40 Chrome Web Store...

CVE-2026-19558

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user is convinced to install a specially crafted malicious extension...

EUVD-2026-56985

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-19558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute...

CVE-2026-12235: Out-of-bounds Write

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...