Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105457 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge web browsers allows attackers to expose protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the GamepadAPI component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the GamepadAPI component in Google Chrome and Microsoft Edge browsers is related to errors during initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Malicious code in gcphelpit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...

MAL-2026-15810 Malicious code in gcphelpit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...

SUSE CVE-2026-72172

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: fix uninitialized struct pages for ZONEDEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However, compoundnrpages still assumes th...

CVE-2026-80650

A flaw was found in the Linux kernel's media: atomisp: gc2235 module. This vulnerability arises from incorrect error handling during the module's initialization process. Specifically, a use-after-free UAF condition can occur, where the system attempts to use memory that has already been released,...

CVE-2026-80597

A flaw was found in the Linux kernel's mtd: maps: vmu-flash component. During the initialization of the Memory Technology Device MTD, a NULL pointer dereference can occur if the mtdinfo structure, which contains a device structure, is not properly linked to its parent. This issue can lead to the...

CVE-2026-80682

A flaw was found in the Linux kernel's RISC-V memory management component. An incorrect calculation for memory alignment during system initialization could lead to a kernel warning. This issue arises when the physical memory base address is not properly aligned, potentially causing system...

The vulnerability of the comedi_device_attach() function in the drivers/comedi/drivers.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the comedideviceattach function in the drivers/comedi/drivers.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the functions dcache_init_early() and dcache_init() in the fs/dcache.c module of the Linux kernel’s file system allows a attacker to access protected information or cause service failures.

The vulnerability of the functions dcacheinitearly and dcacheinit in the fs/dcache.c module of the Linux kernel’s file system is related to a cyclic shift. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-54467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied...