FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95297): chromium -- security fixes

Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-102851

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description An out of bounds read exists in WebGL, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. An out of bounds read occurs when a program reads...

PT-2026-102840

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description An uninitialized resource in Dawn allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android to...

PT-2026-102853

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Missing authorization in Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, enables a remote attacker wh...

PT-2026-102846

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to read memory outsi...

PT-2026-102878

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service and to access so...

Important: gstreamer1-plugins-base

Issue Overview: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an...

Linux Distros Unpatched Vulnerability : CVE-2026-100890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library...

CVE-2026-102263: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

PT-2026-102438

Name of the Vulnerable Software and Affected Versions MODSetter SurfSense versions prior to 0.0.36.3 Description A server-side request forgery SSRF flaw exists in the Document Export Feature within the file surfsense backend/app/routes/editor routes.py. This issue allows a remote attacker to...

PT-2026-102449

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

PT-2026-102428

Name of the Vulnerable Software and Affected Versions RaspAP raspap-webgui versions prior to 3.5.6 Description Improper privilege management occurs within the PluginInstaller::addSudoers function located in the src/RaspAP/Plugins/PluginInstaller.php file of the sudo Configuration component. This...

SUSE CVE-2026-67225

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated during the Tune handshake but did not compare it with an inbound frame's declared length before buffering the frame. With the stream plugin...

CVE-2026-101277 Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source

A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkimprocessset of the file dkim.c of the component Tag Tokenizer. Performing a manipulation results in use of less trusted source. The attack may be initiated remotely. The...

CVE-2026-101277

A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkimprocessset of the file dkim.c of the component Tag Tokenizer. Performing a manipulation results in use of less trusted source. The attack may be initiated remotely. The...

CVE-2026-101277

A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkimprocessset of the file dkim.c of the component Tag Tokenizer. Performing a manipulation results in use of less trusted source. The attack may be initiated remotely. The...

CVE-2026-101277

A security flaw exists in Trusted Domain Project OpenDKIM versions up to 2.11.0 . The vulnerability originates in the Tag Tokenizer component, specifically within the dkim_process_set function of the dkim.c file. A manipulation can lead to the use of a less trusted source , which may be triggered...

SUSE CVE-2026-100888

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The atta...

SUSE CVE-2026-100889

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkimqpdecode of the file util.c of the component Decoder. The manipulation results in off-by-one. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

CVE-2026-101265

A vulnerability exists in Intelbras TIP 125i versions 4.3.35 and 4.3.41 involving an unknown function within the Básico Page component. This flaw allows for the inclusion of sensitive information in the source code via a remote attack. The attack is characterized by high complexity and difficult ...