Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from an uninitialized memory issue in its Networking component, which may lead to memory information leakage...

Randall Hand Yerase’s TNEF Stream Reader buffer error vulnerability

Randall Hand Yerase’s TNEF Stream Reader 2.1.2 and earlier versions have a buffer error vulnerability. This vulnerability stems from the improper handling of compressed RTF attributes by the MAPIPrint function. After decompression, the RTF files lack the NUL terminator, leading to out-of-bounds...

CVE-2026-98183

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker can trigger an out-of-bounds read by transmitting specially crafted wireless mesh network frames containing empty Path Request PREQ elements. This issue occurs because the kernel reads header field...

Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_8317)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228317 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_7111)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227111 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...

CVE-2026-16530

A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2026-17759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...

Astra Linux – vulnerability in Chromium

An improper implementation in DevTools within Google Chrome prior to version 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to extract potentially sensitive information from process memory using a specially crafted Chrome Extension. Chromium security...

Astra Linux – vulnerability in Chromium

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Improper implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14421

Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14406: Out-of-bounds Read

Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-13877

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13947

Uninitialized Use in XR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13970

Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14117

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security...

CVE-2026-13911

The Spellcheck component in Google Chrome and Microsoft Edge is vulnerable to insufficient data validation. A remote attacker who has compromised the renderer process can exploit this flaw by using a crafted HTML page to obtain potentially sensitive information from process memory. This issue was...

CVE-2026-13828

An inappropriate implementation in Enterprise within Google Chrome prior to version 150.0.7871.47 allows a remote attacker to obtain potentially sensitive information from process memory by viewing a crafted HTML page . The root cause is identified as a lack of access control . This vulnerability...

CVE-2026-13808

A vulnerability in Google Chrome on iOS (prior to version 150.0.7871.47) allows a local attacker with physical access to the device to obtain potentially sensitive information from process memory. The root cause is insufficient data validation . While the provided documents confirm the existence ...