DEBIAN-CVE-2026-41035

In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X aka --xattrs. On Linux, many but not all common configurations are vulnerable. Non-Linux platforms are more widely vulnerable...

DEBIAN-CVE-2026-6358

Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-6318

Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-6317

Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-6312

Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-6309

Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

MINI-GF35-CCPH-HP9W

Bulletin has no description...

MINI-4MP2-7773-XVR7

Bulletin has no description...

RHSA-2026:8075 Red Hat Security Advisory: bind security update

Bulletin has no description...

BELL-CVE-2026-39956

Bulletin has no description...

BELL-CVE-2026-5713

Bulletin has no description...

MINI-6VCP-HX65-V883

Bulletin has no description...

MINI-7P62-4QMC-XJP8

Bulletin has no description...

BELL-CVE-2026-31397

Bulletin has no description...

BELL-CVE-2026-23460

Bulletin has no description...

BELL-CVE-2026-23433 CVE-2026-23433 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-23431

Bulletin has no description...

MINI-GR9H-34H9-36W9

Bulletin has no description...

DEBIAN-CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

DEBIAN-CVE-2026-6231

The bsonvalidate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that re...