BIT-GITEA-2026-96404 Gitea installer authentication bypass for existing accounts

When Gitea's web installer is reachable against a database that already contains users, such as after INSTALLLOCK has been reset to false, submitting the install form with an administrator username matching an existing account issued an authenticated session for that account without verifying its...

DEBIAN-CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

UBUNTU-CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110452

A flaw was found in nix. The multi-user installer incorrectly assigns ownership of Nix store contents to the user who ran the installation rather than to root. A local user who executed the installer can modify files within the Nix store, leading to unauthorized modification of installed software...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110452

The multi-user installer in Nix before version 2.35.3 is vulnerable to an incorrect ownership assignment (CWE-708). The installer incorrectly sets the ownership of store contents to the user who invokes it, rather than maintaining the required root ownership . This issue allows for unauthorized m...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

EUVD-2026-100808

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

CVE-2026-110150

A privilege elevation flaw was found in the Installer component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561334760...

EUVD-2026-100637

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-110452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

Linux Distros Unpatched Vulnerability : CVE-2026-110150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local...

PT-2026-113633

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

DEBIAN-CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

CVE-2026-110150

A privilege elevation flaw exists in the Installer component of Google Chrome on Windows versions prior to 155.0.8059.79 . This vulnerability allows a local attacker to obtain sensitive information by executing a local program. The issue has a High security severity in Chromium. Remediation is av...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...