SUSE CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any...

CVE-2026-17776

A policy bypass flaw was found in the Receiver component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513404032...

DEBIAN-CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

CVE-2026-17776 is a policy-bypass in the Receiver component of Google Chrome prior to 151.0.7922.72. A remote attacker who has already compromised the renderer could potentially perform a sandbox escape via a crafted HTML page, as described in upstream/ vendor advisories. The core issue involves ...

CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13898

An use after free flaw was found in the Cast Receiver component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501925480...

ALSA-2026:47010 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 For more details about the security issues, including the impact, a CVSS score,...

RHEL 8 : kernel (RHSA-2026:47011)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47011 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: fix possible UAF in icmpv6rcv...

EUVD-2026-49593

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

SUSE CVE-2026-42448

Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.24.0, there is a path traversal when a receiver who specifies "--output " where that output directory currently exists as a directory. This vulnerability is fixed in 0.24.0...

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

Astra Linux – Vulnerability in Chromium

The use of after free in the Cast Receiver in Google Chrome before version 150.0.7871.47 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-46801

Vulnerability in Oracle GoldenGate component: Receiver Service Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

CVE-2026-60399

Vulnerability in Oracle GoldenGate component: Receiver Service Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

EUVD-2026-46444

The NXP LPUART serial driver drivers/serial/uartmcuxlpuart.c, when CONFIGUARTUSERUNTIMECONFIGURE is enabled, called LPUARTDeinit at the start of mcuxlpuartconfigure, which disables the LPUART peripheral clocks. The requested configuration is validated only afterwards in mcuxlpuartconfigurebasic,...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

PT-2026-62481

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 19.1.0.0.0 through 19.30.0.0 Oracle GoldenGate versions 21.3 through 21.21 Oracle GoldenGate versions 23.4 through 23.26.1 Description A flaw in the Receiver Service Executable allows a low privileged attacker with...

DEBIAN-CVE-2026-44510

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver-side out-of-bounds array read in rsync's recvfiles lets a malicious rsync server or any peer acting in the sender role deterministically crash any rsyn...