EUVD-2026-46192

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16351

CVE-2026-16351 is a sandbox escape caused by a use-after-free in the DOM: Navigation component. It affected Mozilla Firefox and Firefox ESR prior to 115.38, with fixes in Firefox 153 and ESR 115.38/140.13. Affected products include Firefox ESR versions older than 115.38 (per multiple feeds), and ...

CVE-2026-16351 Sandbox escape due to use-after-free in the DOM: Navigation component

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16351

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16351

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 CVSS score: 9.5, a sandbox escape...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

RLSA-2026:42088 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash CVE-2026-39872 webkitgtk: webkitgtk:...

EUVD-2026-46129

Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-46128

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-46126

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-46125

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2765)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

vim security update

9.1.083-9.0.1.el102.7 - Remove upstream references Orabug: 31197557 2:9.1.083-9.7 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete 2:9.1.083-9.6 - RHEL-185867 CVE-2026-47167 vim: Code...

Google Chrome < 150.0.7871.181 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.181. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0256605430 advisory. - Use after free in GPU in Google Chrome on Android prior to...

PT-2026-63253

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.182 Description A use-after-free issue exists in the GPU component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A...

PT-2026-63242

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An out-of-bounds write in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ANGLE Almost Native...

PT-2026-63245

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An integer overflow occurs in the Chromecast component. This flaw allows a local attacker to potentially achieve a sandbox escape by sending malicious network traffic. A sandbox escape...

PT-2026-63248

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.182 Description An out-of-bounds read and write issue exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This flaw allows a remote attacker to...

PT-2026-63250

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An inappropriate implementation in the WebAudio component allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a specially crafted HTML page...