PT-2026-81544

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Skia is a 2D graphics library used for rendering...

PT-2026-81659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper resource exposure in the StreamsAPI allows a remote attacker to potentially bypass the web origin policy—a security mechanism that restricts how a document or script loaded fro...

The vulnerability of the meson_spiccremove() function in the drivers/spi/spi-meson-spicc.c driver for Linux SPI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mesonspiccremove function in the drivers/spi/spi-meson-spicc.c driver for Linux’s SPI device drivers is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the dw_spi_dma_wait() function in the drivers/spi/spi-dw-dma.c file of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the dwspidmawait function in the drivers/spi/spi-dw-dma.c file of the Linux kernel’s SPI device driver is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_nvm_init() function in the drivers/gpu/drm/xe/xe_nvm.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the `tcp_bpf_send_verdict()` function in the `net/ipv4/tcp_bpf.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qlt_free_session_done() function in the drivers/scsi/qla2xxx/qla_target.c driver for Linux SCSI device drivers allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

The vulnerability of the lineinfo_changed_notify() function in the drivers/gpio/gpiolib-cdev.c driver for the Linux operating system’s GPIO kernel allows a attacker to cause a service failure.

The vulnerability of the lineinfochangednotify function in the drivers/gpio/gpiolib-cdev.c driver for the Linux GPIO kernel driver involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_register_host_bridge() function in the drivers/pci/probe.c module of the Linux system’s PCI device driver allows a hacker to cause a service failure.

The vulnerability of the pciregisterhostbridge function in the drivers/pci/probe.c module of the Linux PCI device driver framework is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerabilities of the functions br_mrp_start_test() and br_mrp_start_in_test() in the net/bridge/br_mrp.c module, which implement networking functions for the Linux kernel, allow a hacker to cause a service failure.

The vulnerability of the functions brmrpstarttest and brmrpstartintest in the net/bridge/brmrp.c module, which implement networking functions for the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966x_ethtool.c, drivers/net/thernet/microchip/lan966x/lan966x_main.c, and drivers/net/thernet/microchip/lan966x/lan966x_vcap_impl.c of the Linux operating system’s Ethernet network adapter drivers allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...

The vulnerability of the init_cpu_fullname() function in the arch/loongarch/kernel/env.c module, which is part of the LoongArch architecture support for Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the initcpufullname function in the arch/loongarch/kernel/env.c module of the LoongArch architecture support for Linux operating systems is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-78682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load,...

PT-2026-81580

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the Video component allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-81576

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Skia is a 2D...

PT-2026-81592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Recommendatio...

PT-2026-81590

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

CVE-2026-79285: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...