CVE-2026-106399: Out-of-bounds Read

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...

CVE-2026-106284: Out-of-bounds Read

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107287

NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service...

CVE-2026-98247: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicodec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check includes...

PT-2026-106678

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw process probe response and the libipw network init call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and...

PT-2026-106519

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilc wfi p2p rx and mgmt tx start parsing a frame once ieee80211 is public action returns true. That helper only verifies the frame is long enough for the action...

ROS-20261006-73-0046

The vulnerability of the verifydfa function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106691

In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpi dvfs recalc rate dvfs get idx may return an out-of-range index if the SCP firmware is buggy or returns a stale value. Only negative indexes were rejected, so a large index walked past...

CVE-2026-106507: Improper Link Resolution Before File Access

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2026-106386: Use of Uninitialized Resource

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106957

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out of bounds read exists in the Printing component on Windows. This issue allows a remote attacker, who has already compromised the renderer process and used social engineering, to...

PT-2026-106890

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, enables a remote attacker to read memory...

PT-2026-106896

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107048

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to read memory outsi...

PT-2026-107058

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the WebAudio component allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. Recommendations Update Google Chro...

PT-2026-106946

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Video component allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafte...

PT-2026-106977

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...

PT-2026-106948

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-106963

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106877

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to read memory outsi...