MiracleLinux 9 : nodejs:24 (AXSA:2026-1739:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1739:01 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion vi...

PT-2026-84982

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.6 util-linux version 2.42.2 Description The software fails to verify the exit status of mount helpers before executing post-mount hooks. This allows unprivileged users to perform privileged operations on...

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge web browsers allows a attacker to compromise data integrity.

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

RockyLinux 8 : nodejs:24 (RLSA-2026:62583)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62583 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

MiracleLinux 9 : nodejs:22 (AXSA:2026-1738:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1738:01 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion vi...

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84323

Google Chrome (prior to version 152.0.7977.75 ) and Microsoft Edge are affected by a missing authorization vulnerability in the FileSystem component. A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to obtain sensitive informati...

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Google Chrome and Microsoft Edge (Chromium-based) are affected by a missing authorization vulnerability in the FileSystem component. Prior to version 152.0.7977.75, a remote attacker who has compromised the renderer process could bypass the web origin policy using a crafted HTML page. This vulner...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84354

Google Chrome (prior to version 152.0.7977.75 ) contains an incorrect authorization vulnerability in the FileSystem component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by visiting a crafted HTML page. This vulnerability also affects Microsoft...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...