CVE-2026-87476

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87476

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin...

Linux Distros Unpatched Vulnerability : CVE-2026-87575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-87476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

CVE-2026-87508: Incorrect Authorization

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87571: Improper Certificate Validation

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromiu...

CVE-2026-87476: Incorrect Authorization

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87575: Incorrect Authorization

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

Security update for emacs

This update for emacs fixes the following issues: Arbitrary code execution when opening a specially crafted file bsc1275941. CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color ind...

SUSE-SU-2026:4083-1 Security update for emacs

This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color...

PT-2026-89116

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description Crafted grid, iovl, and iden reference graphs can cause the same base image to be decoded repeatedly. This occurs because processed ids is copied per branch and the decode image function in ImageIte...

PT-2026-88608

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Loader component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fr...

PT-2026-88671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper certificate validation in the Loader component allows a remote attacker to bypass the web origin policy through crafted network traffic, provided they can leverage social...

PT-2026-89117

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description The heif region item add region inline mask data function in libheif/api/libheif/heif regions.cc accepts the mask data len parameter without verifying if it matches the byte count required by the...

OPENSUSE-SU-2026:11719-1 gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89115

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description Crafted HEIF sequence timing and edit-list data can cause the init sample timing table function to compute a logical m num output samples value that exceeds the uint32 t counters used by decode next...

PT-2026-88675

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Loader component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-88576

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Loader component allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google...