GHSA-J7WG-HX8X-R38H vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5909 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6361 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QCVG-HWR7-R9V7 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5911 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5919 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5908 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2RW5-37W7-549X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4HXJ-CQ55-F7PF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3GVP-P32J-PC5M vulnerabilities

Vulnerabilities for packages: chromium...

SUSE CVE-2026-6309

Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

USN-8184-1: Linux kernel (Real-time) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

CVE-2026-23778

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with...

CVE-2026-26171 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk, promitor, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

GHSA-37GX-XXP4-5RGX vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap, dotnet, promitor, dotnet-sdk, powershell, dotnet-sdk-stage0...

GHSA-H383-GMXW-35V2 vulnerabilities

Vulnerabilities for packages: celeborn, sonarqube, akhq, elasticsearch, nuxeo, opensearch, zaproxy, spark, geoserver, spark-fips, solr, elasticsearch-fips, commercial-elasticsearch, logstash-fips, kafka-fips, hadoop-fips, pinot-fips, druid, kserve-modelmesh, kafka, logstash, pinot, flink...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: apache-nifi, debezium-connector-ibmi, thingsboard, opensearch, debezium-connector-db2, hono, knative-kafka-broker-fips, seata, opensearch-fips, debezium-connector-spanner, knative-kafka-broker, debezium-connector-vitess, strimzi-kafka-operator-fips, wildfly, debezium...

Denial of service in static resource handling on Windows platforms

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: When all the conditions above are met, the attacker can send malicious requests that are slow to resol...

Red Hat Ansible Automation Platform（Red Hat AAP） 安全漏洞

The Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for strategic automation provided by Red Hat, Inc. There is a security vulnerability in the Red Hat Ansible Automation Platform Red Hat AAP, which stems from improper input cleaning of the toolsetroute parameter. This...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007258 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SETIRQS ioctl currently allows...