Important: Red Hat Security Advisory: postgresql16-postgis security update

An update for postgresql16-postgis is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer

A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...

CVE-2026-18238

A flaw was found in libpcap. The rpcap client code, which processes RPCAPMSGPACKET messages from a server, incorrectly validates its headers. A malicious server could exploit this vulnerability by sending a specially crafted message, causing the client to read up to 20 bytes of memory beyond its...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-87586

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability allows a remote attacker to read memory outside of the browser's security sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page. The primary consequence is the...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87592

A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, a security...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87602

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87456

Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87525

A flaw was found in Chromoting in Google Chrome. This out-of-bounds read vulnerability allows a local attacker to exploit the system by running a malicious local program. Successful exploitation could lead to the attacker reading memory outside of the security sandbox, potentially disclosing...

EUVD-2026-74476

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87602

CVE-2026-87602 is an out-of-bounds read in the ANGLE component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A remote attacker can read memory outside the sandbox by delivering a crafted HTML page to the user, requiring user interaction but no privileges. Chromium rate...

CVE-2026-87592

CVE-2026-87592 is an out-of-bounds read vulnerability in the Tint component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can potentially read memory inside the sandbox by delivering a crafted HTML page that triggers the flaw. The CVSS 3.1 base score is 4.3 (Medium) with the...

CVE-2026-87586

CVE-2026-87586 is an out-of-bounds read in ANGLE , the multi-platform graphics rendering layer used by Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit the flaw via a crafted HTML page to read memory outside the sandbox . The Chromium project rates the severity as Medi...

CVE-2026-87586

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87576

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74341

Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87456

CVE-2026-87456 is an uninitialized resource vulnerability in the Media component of Google Chrome prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to read memory outside the sandbox . The CVSS 3.1 score is 3....

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...