28894 matches found
CVE-2026-88514: Exposure of Sensitive Information to an Unauthorized Actor
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
PT-2026-107583
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description Insufficient validation of user-supplied input in the Python interpreter allows an authenticated, local attacker with low privileges to escape the Python sandbox. By manipulating...
PT-2026-107510
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2026-106254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app...
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
When no system-installed liblz4-java is found, net.jpountz.util.Native.load extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive creation...
Security update for wpa_supplicant (important)
openSUSE security update: security update for wpasupplicant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22022-1 Rating: important References: bsc1280914 Cross-References: CVE-2026-78807 CVSS scores: CVE-2026-78807 SUSE : 7.1...
Linux Distros Unpatched Vulnerability : CVE-2026-106326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page...
EUVD-2026-94359
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2026-106340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...
CVE-2026-88514
A vulnerability in iTerm2 for macOS before version 3.6.12 allows a local attacker to obtain sensitive information . The issue is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). While the documents confirm the existence of the vulnerability and its impact on c...
PT-2026-107422
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...
Linux Distros Unpatched Vulnerability : CVE-2026-106399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-104046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memo...
Linux Distros Unpatched Vulnerability : CVE-2026-106451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive tempora...
SUSE CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
SUSE CVE-2026-106306
Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2026-106313
Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
SUSE CVE-2026-106340
Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...
