CVE-2026-17698

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17699

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2026-17698

CVE-2026-17698: Google Chrome on Android suffers from insufficient validation of untrusted input in the UI, allowing a local attacker to leak cross-origin data via a crafted HTML page. Affected software: Chrome on Android before version 151.0.7922.72. Root cause: insufficient input validation in ...

CVE-2026-17699

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2026-17690

Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17654

The CVE-2026-17654 entry concerns Google Chrome on macOS with a race in the Updater that could lead to OS-level privilege escalation via a malicious file. Root cause is a race condition in the Updater component; affected version is Chrome prior to 151.0.7922.72. The vulnerability could allow a lo...

PT-2026-66222

Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

PT-2026-66315

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

PT-2026-66330

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

PT-2026-66293

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-66181

Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

PT-2026-66180

Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

PT-2026-66303

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66183

Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTM...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-64336

A flaw was found in the Linux kernel's keyspanpda USB serial driver. An issue with the write callback function allows it to report more data written than was actually provided. This can lead to the system writing data beyond its allocated buffer, resulting in an information leak. A local attacker...