PT-2026-81653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the BFCache Back-Forward Cache, a browser feature that stores a complete page in memory to allow instant loading when navigating back or forward. This issu...

PT-2026-81553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Core component allows a remote attacker who has compromised the renderer process to bypass site isolation. This is achieved by using a crafted HTML page. Site...

PT-2026-81806

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the DataTransfer component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations...

PT-2026-81627

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in the Autofill feature allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome t...

PT-2026-81731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in DevTools allows a remote attacker to obtain sensitive information through UI Interaction by leveraging social engineering. Recommendations Update Google Chrome ...

PT-2026-81736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Extensions allows a remote attacker using social engineering to obtain sensitive information through a crafted Chrome extension. Recommendations Update Google...

PT-2026-81621

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the editing process allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81357

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Corpus readers reopen root-derived paths using the built-in open function instead of nltk.pathsec.open, which allows symbolic links to escape trusted roots. This path traversal issue enables attackers...

FreeBSD-SA-26:56.hwpmc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:56.hwpmc Security Advisory The FreeBSD Project Topic: hwpmc fails to detach PMCs during exec credential transitions Category: core Module: hwpmc Announced:...

The vulnerability of the sk_diag_dump_name() function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skdiagdumpname function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, stems from the lack of protection for service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the cdc_ncm_rx_verify_ndp32() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp32 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver is related to errors in calculating the data buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the ath11k_macDestroy() function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to access protected information or cause service failure.

The vulnerability of the ath11kmacDestroy function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

The vulnerability of the validate_set() function in the net_openvswitch/flow_netlink.c module, which supports Open vSwitch routers in Linux operating systems, allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the validateset function in the netopenvswitch/flownetlink.c module, which supports Open vSwitch routers in Linux operating systems, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise th...

AlmaLinux 10 : python-urwid (ALSA-2026:58561)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58561 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description bloc...

JetBrains TeamCity < 2022.10 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.10. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings CVE-2022-44623 - In JetBrains...

Linux Distros Unpatched Vulnerability : CVE-2026-78678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers t...

RockyLinux 9 : python-urwid (RLSA-2026:58952)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58952 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description bloc...

RHEL 10 : assertj-core (RHSA-2026:59372)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59372 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

PT-2026-81537

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebProtect allows a remote attacker to leak sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.65 ...

PT-2026-81690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in TabGroups allows a remote attacker to potentially leak sensitive information through crafted network traffic. Recommendations Update Google Chrome to version...