CVE-2026-79046

A flaw was found in Google Chrome on Android. A race condition in the Permissions component allows a remote attacker to bypass the web origin policy. This can be achieved by leveraging social engineering with a crafted HTML page, potentially leading to unauthorized access or actions...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78979

A flaw was found in Chromium. This race condition vulnerability allows a remote attacker to bypass the web origin policy. By leveraging social engineering and a specially crafted HTML page, an attacker can circumvent security restrictions designed to isolate web content. This could lead to...

CVE-2026-78915

A flaw was found in Google Chrome. A race condition in the Enterprise feature on Windows could allow an adjacent attacker to potentially execute arbitrary code outside the sandbox. This vulnerability is triggered by crafted network traffic, leading to unauthorized control over the affected system...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-79117

A flaw was found in WebAppInstalls in Google Chrome on Android. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a co-installed application, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or actions...

CVE-2026-79267

A flaw was found in chromium-browser. A race condition in the Workers component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This bypass was achieved by tricking a user into opening a specially crafted HTML page, potentially leading...

AZL-97769 CVE-2026-80572 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

CVE-2026-80572

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

CVE-2026-80559

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

AZL-97836 CVE-2026-80559 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

AZL-97700 CVE-2026-80556 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmciremove due to race condition In atmciprobe, &host-bhwork is bound with atmciworkfunc, and atmciinterrupt, atmcitimeouttimer and atmcidmacomplete can all queue this work on systembhwq. If...

CVE-2026-80556

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmciremove due to race condition In atmciprobe, &host-bhwork is bound with atmciworkfunc, and atmciinterrupt, atmcitimeouttimer and atmcidmacomplete can all queue this work on systembhwq. If...

AZL-97824 CVE-2026-80551 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

CVE-2026-80547

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware. Implement a...

AZL-97737 CVE-2026-80547 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware. Implement a...

CVE-2026-80548

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share. With the handful of race...

UBUNTU-CVE-2026-80547

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware. Implement a...

UBUNTU-CVE-2026-80556

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmciremove due to race condition In atmciprobe, &host-bhwork is bound with atmciworkfunc, and atmciinterrupt, atmcitimeouttimer and atmcidmacomplete can all queue this work on systembhwq. If...

UBUNTU-CVE-2026-80548

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share. With the handful of race...