PT-2026-24249

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters...

PT-2026-24871

🟠 CVE-2026-3923 - High Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High https://t.co/Ld03JbJUly...

ROS-20260310-73-0014

A vulnerability in the Split View component of Google Chrome browser is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow a remote attacker to conduct spoofing attacks...

Fortinet FortiManager Lack of TLS Certificate Validation during initial SSO Authentication (FG-IR-26-078)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-078 advisory. - A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 throu...

The vulnerability of the <img> tag in QML and Qt Quick for Qt6 Declarative allows a attacker to cause a service failure.

The vulnerability of the tag in QML and Qt Quick for Qt6 is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the anx7625_i2c_probe() function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the anx7625i2cprobe function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the disclosure of information, allows attackers to access confidential data.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the afu_allocate_irqs() function in the drivers/misc/cxl/irq.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the afuallocateirqs function in the drivers/misc/cxl/irq.c file of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

PT-2026-24868

🟠 CVE-2026-3920 - High Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severi... https://t.co/yE3G86yUYK https://t.co/NANjbRQSCQ...

PT-2026-24875

CVE-2026-3927 Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium se… https://t.co/xQOmuPUU6x...

PT-2026-24888

CVE-2026-3941 Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.… https://t.co/9gTnqXNedp...

PT-2026-24345

CVE-2025-56421 SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database. https://t.co/LNI5znu9QV...

CVE-2025-56421

LimeSurvey is affected by an SQL Injection vulnerability in versions before 6.15.4+250710. The issue allows a remote attacker to obtain sensitive information from the database. The description does not specify exact vulnerable components, the root cause details, or concrete exploitation vectors b...

PT-2026-24184

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges...

ROS-20260310-73-0037

A vulnerability in the Background Fetch API of the Google Chrome browser is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information using a specially crafted HTML page...

ROS-20260310-73-0011

A vulnerability in the Digital Credentials component of Google Chrome browser is related to incorrect restriction of visualized user interface layers. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of protected information...

ROS-20260310-73-0036

Vulnerability in grafana related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260310-73-0021

Vulnerability in python-pymdown-extensions related to the use of regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260310-73-0051

Vulnerability in angie related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

PT-2026-24869

🟠 CVE-2026-3921 - High Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High https://t.co/pqfMzBB7hI https://t.co/osUbhGnTgC...