PT-2026-81812

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the ServiceWorker, which allows a remote attacker to obtain cross-origin data by using a crafted HTML page. ServiceWorker is a script that the browser runs...

PT-2026-81833

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the GPU allows a remote attacker to obtain cross-origin data, which is data from a different origin than the one serving the page, by using a crafted HTML page...

PT-2026-81780

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Network component. A remote attacker who has already compromised the renderer process can obtain sensitive information by using a crafted HTML page...

PT-2026-81377

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2026 Q3 Description An integer conversion issue occurs when loading images, leading to an out-of-bounds read, which is a condition where the software reads data outside the intended memory boundary. This can result...

PT-2026-81378

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2026 Q3 Description An integer overflow leads to an out-of-bounds write, which occurs when a program writes data past the end of a pre-allocated memory buffer. This issue can result in information disclosure or...

RockyLinux 8 : firefox (RLSA-2026:58898)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58898 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...

PT-2026-81599

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description An information leak exists in the Bluetooth component. A remote attacker who has compromised the renderer process and uses social engineering can obtain sensitive information by...

PT-2026-81596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in WebProtect allows a remote attacker who has already compromised the renderer process to obtain sensitive information by using a crafted HTML page. A race condition...

PT-2026-81845

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the CSS component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-81768

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in HTTP2 allows a remote attacker to leak sensitive information by using crafted network traffic. Recommendations Update Google Chrome to version 152.0.7977.65 or...

PT-2026-81714

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the GetUserMedia function allows a remote attacker to obtain sensitive information through a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-81631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Cross-Origin Resource Sharing CORS implementation. A remote attacker who has already compromised the renderer process can leak cross-origin data by usi...

The vulnerability of the fnnlosf_add_callback() function in the net/netfilter/nfnetlink_osf.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the fnnlosfaddcallback function in the net/netfilter/nfnetlinkosf.c module of the netfilter kernel of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of protected...

The vulnerability of the cgw_csum_crc8_rel() function in the net/can/gw.c module of the CAN bus subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cgwcsumcrc8rel function in the net/can/gw.c module of the Linux operating system’s CAN subsystem relates to access to a memory cell preceding the buffer’s start. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the SYSCALL_DEFINE4() function in the kernel/futex/syscalls.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SYSCALLDEFINE4 function in the kernel/futex/syscalls.c module of the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

Debian dla-4755 : libvncclient1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4755 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected]...

The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.

The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

AlmaLinux 9 : python-urwid (ALSA-2026:58952)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58952 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

RockyLinux 10 : firefox (RLSA-2026:58899)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58899 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics...

RHEL 9 : python-urllib3 (RHSA-2026:59409)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59409 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...