PT-2026-24869

🟠 CVE-2026-3921 - High Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High https://t.co/pqfMzBB7hI https://t.co/osUbhGnTgC...

PT-2026-24887

🚨 CVE-2026-3940 Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low 🎖@cveNotify...

The vulnerability of the virtio_uml_probe() function in the arch/um/drivers/virtio_uml.c file of 1 Linux kernel cores allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the virtioumlprobe function in the arch/um/drivers/virtiouml.c file of 1 Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the recv_done() function in the fs/smb/server/transport_rdma.c module of the SMB server support in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the recv_done() function in the fs/smb/server/transport_rdma.c module of the SMB server support in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the can_follow_write_pte() function (mm/gup.c) and can_follow_write_pmd() function (mm/huge_memory.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the canfollowwritepte function mm/gup.c and canfollowwritepmd function mm/hugememory.c in the Linux kernel is related to improper handling of states during memory management. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

ROS-20260310-73-0010

A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read and delete data using a specially...

ROS-20260310-73-0017

An Exim mail server vulnerability is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260310-73-0018

Vulnerability in libsoup related to a flaw in http request handling. Exploitation of the vulnerability could allow a remote attacker to send a hidden http request http request smuggling attack...

ROS-20260310-73-0013

A vulnerability in the user interface UI of the Google Chrome browser is related to the lack of a user warning about unsafe actions. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions...

Multiple Cisco Products Snort 3 Visual Basic for Applications DoS Vulnerabilities (cisco-sa-ftd-snort3-vbavuls-96UcVVed_CVE-2026-20058)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilitie...

PT-2026-24875

CVE-2026-3927 Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium se… https://t.co/xQOmuPUU6x...

PT-2026-24185

An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access...

PT-2026-24878

🚨 CVE-2026-3930 Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium 🎖@cveNotify...

PT-2026-24862

🟠 CVE-2026-3914 - High Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High https://t.co/PstrS4Th1R https://t.co/qREKDlW9XK...

PT-2026-24882

CVE-2026-3935 Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium secu… https://t.co/HGxaJ6tckB...

Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-multi-dos-XFWkWSwz_CVE-2026-20066)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in ...

The vulnerability of the `qed_protection_override_dump()` function in the `drivers/net/ethernet/qlogic/qed/qeddebug.c` file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qedprotectionoverridedump function in the drivers/net/ethernet/qlogic/qed/qeddebug.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the cnic_cm_stop_bnx2x_hw() function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

ROS-20260310-73-0006

Vulnerability in wcurl related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...