CVE-2026-17716

CVE-2026-17716 describes a use-after-free flaw in Chrome’s Updater on macOS, allowing a local attacker to escalate privileges via malicious network traffic. Affected: Google Chrome/Chromium Updater on Mac. Root cause: use-after-free in Updater. Impact: privilege escalation with high severity (per...

EUVD-2026-50837

Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50835

Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17698

CVE-2026-17698: Google Chrome on Android suffers from insufficient validation of untrusted input in the UI, allowing a local attacker to leak cross-origin data via a crafted HTML page. Affected software: Chrome on Android before version 151.0.7922.72. Root cause: insufficient input validation in ...

CVE-2026-17691

This CVE (CVE-2026-17691) concerns an out-of-bounds write in ANGLE used by Google Chrome on Windows, affecting Chrome builds prior to 151.0.7922.72. The root cause is an ANGLE vulnerability that could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. The impact is desc...

CVE-2026-17665

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-17661

Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-17656

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-66315

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-17713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the...

Linux Distros Unpatched Vulnerability : CVE-2026-17893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

PT-2026-66121

Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Technology-Enhanced Tabletop Exercises for Cybersecurity Education: Lessons Learned

This innovative practice full paper examines the integration of technology-enhanced tabletop exercises TTXs into computing education, focusing on cybersecurity curricula. The motivation is to better prepare students for complex, collaborative problem solving typical of incident response and IT...

PT-2026-66130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows. This flaw allows a remote attacker to...

PT-2026-66471

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized keys file for the root user. An attacker in possession of the...

foreUP golf management platform's web API contains multiple vulnerabilities

Overview Two vulnerabilities in the REST API were found in Golf Compete foreUP. The first exposes the merchant, Finix, API credentials directly in customer record responses, allowing any user to obtain and use the payment processor account. The second is a missing object-level authorization check...

PT-2026-65973

Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Critical...

PT-2026-66175

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description An inappropriate implementation in the Network component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This i...

Linux Distros Unpatched Vulnerability : CVE-2026-17707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain...

PT-2026-66499

Name of the Vulnerable Software and Affected Versions OpenCost versions prior to 1.121.0 Description Authentication is not properly enforced for the 'GET /helmValues' endpoint, which exposes the base64-decoded HELM VALUES environment variable containing cloud provider credentials. Furthermore, th...