CVE-2026-70651

In libvips versions before 8.18.3, the ImageMagick fallback path in magick6load.c and magick7load.c multiplies per-page Ysize by n_frames without bounds checking, causing a heap buffer over-read and crash when loading a crafted multi-page TIFF. CVSS 6.9 (medium), local attack vector. Fixed in 8.1...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-74386

A flaw was found in the nvmet-tcp component of the Linux kernel. A remote attacker could repeatedly open and close connections, causing a page fragment cache leak. This vulnerability occurs when a connection is closed during the allocation process, leading to memory not being properly released...

CVE-2026-74383

A flaw was found in the NVMe-PCI subsystem of the Linux kernel. An out-of-bounds access can occur in the nvmesetupdescriptorpools function when handling Non-Uniform Memory Access NUMA node values on systems configured without NUMA support. This incorrect indexing can lead to a page fault,...

CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76020

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76020

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-63600

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-63598

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-63597

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76022

A buffer overflow in the Network component of Google Chrome prior to 151.0.7922.173 allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability was reported by 0xAlessandro on 2026-08-07 and is rated High severity by Chromium (CVSS 8.8). The f...

CVE-2026-76021

CVE-2026-76021 is a use-after-free vulnerability in the DOM component of Google Chrome prior to 151.0.7922.173 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox. The Chromium security severity is High , with a CVSS 3.1 score of 8.8 (AV:...

CVE-2026-76020

A race condition in the V8 engine of Google Chrome prior to 151.0.7922.173 allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The vulnerability was reported by Salvatore Gulizia (Serotav) on 2026-08-03 and carries a Chromium security severity of ...

CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76023

CVE-2026-76023 is an improper resource control vulnerability in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 . An attacker who has already compromised the renderer process can leverage a crafted HTML page to execute arbitrary code outside the sandbox , escalating from a sandboxe...