Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the USB mechanism of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

RLSA-2026:41899 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

EUVD-2026-47864

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...

CVE-2026-54120: Improper Input Validation

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

CVE-2026-16632: Improper Input Validation

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...

ROS-20260723-73-0063

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260723-73-0003

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-65763: Improper Neutralization of Input During Web Page Generation

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability...

ROS-20260723-73-0019

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260723-73-0046

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Dovecot DoS

The vulnerability of the Dovecot mail server is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

PT-2026-64039

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability...

PT-2026-64040

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper validation of user inputs lead to a reflective XSS vulnerability...

ROS-20260723-73-0013

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260723-73-0054

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-16723: Improper Input Validation

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

Linux kernel block-level support Heap Buffer Overflow DoS

The vulnerability of the calclcoefs function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-65604: Improper Input Validation

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...