CVE-2026-103630: Use After Free

Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103628: Out-of-bounds Write

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103626: Incorrect Authorization

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-104392

Name of the Vulnerable Software and Affected Versions image-downloader version 4.3.0 Description A path traversal issue exists where an attacker who can control the download URL can cause the downloaded response data to be written outside the configured destination directory. Path traversal is a...

CVE-2026-95349

A buffer overflow flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553172761...

CVE-2026-95318

A buffer overflow flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576976...

CVE-2026-95350

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/551573368...

Linux Distros Unpatched Vulnerability : CVE-2026-102308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-102313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted...

PT-2026-104390

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description A use after free issue exists in FedCM Federated Credential Management, a mechanism that allows users to sign into websites using their existing accounts from other providers. This flaw...

Linux Distros Unpatched Vulnerability : CVE-2026-102301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-102304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

CVE-2026-51873

Devika v1.0 is vulnerable to Directory Traversal in the Coder.savecodetoproject function, which allows attackers to write files outside the intended project workspace...

PT-2026-104388

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description An out of bounds write in WebGL allows a remote attacker to execute arbitrary code outside the sandbox when a user visits a crafted HTML page. An out of bounds write occurs when a progr...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1786548808)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786548808 advisory. - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2022_4661)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224661 advisory. sinatra: path traversal possible outside of publicdir when serving static files CVE-2022-29970 Tenable has extracted the preceding description block directly from t...

GHSA-59CR-6R3X-644W GitPython submodule update path traversal can write outside the repository

Affected: GitPython 3.1.61 latest release and main — git/objects/submodule/base.py. git diff 3.1.61 origin/main -- git/objects/submodule/ is empty, so both are identical here. --- The gap The fix for GHSA-hmq2-w58f-27jc added Submodule.validatedname and wired it into update and five siblings,...

CVE-2026-51864

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in pythonfileupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/pythonuploadapi.py:42. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of...