CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

DEBIAN-CVE-2026-106340

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

CVE-2026-106340

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

DEBIAN-CVE-2026-106328

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

DEBIAN-CVE-2026-106313

Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

DEBIAN-CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-79808

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager . This flaw could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or cause a disruption in service availability. No specific patch versions, root cause...

CVE-2026-79808 Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service...

EUVD-2026-93893

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-106192

Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106306

A vulnerability in Google Chrome prior to version 155.0.8059.39 allows a local attacker to bypass system access restrictions. The issue is caused by incorrect authorization within the DevTools component, which can be triggered by a crafted HTML page . This vulnerability is classified with a Low s...

CVE-2026-106340

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

EUVD-2026-93588

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

CVE-2026-106340

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by a missing authorization vulnerability in the CredentialProvider component. This flaw allows a local attacker to obtain sensitive information through physical access. While the Chromium security severity is listed as Low , the...

CVE-2026-106207

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106328

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...