PT-2026-84739

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to a Kibana Entity Store configuration operation, allowing an authenticated user with elevated Kibana privileges to indirectly cause a background task...

CVE-2026-81197: Exposure of Sensitive Information to an Unauthorized Actor

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...

CVE-2026-18672: Improper Limitation of a Pathname to a Restricted Directory

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

The vulnerability of the Input component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Related-Website-Sets component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to access confidential data.

The vulnerability of the Related-Website-Sets component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Vulnerability of CSS components in Google Chrome and Microsoft Edge web browsers, allowing attackers to access confidential data

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge web browsers allows attackers to expose protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Cast component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the ComputePressure component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the ComputePressure component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML...

The vulnerability of the XR components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the XR web browsers Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

AlmaLinux 9 : libssh (ALSA-2026:62217)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62217 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length...

Linux Distros Unpatched Vulnerability : CVE-2026-84132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...