CVE-2026-17825

An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517675979...

CVE-2026-17850

An inappropriate implementation flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519078527...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

SUSE-SU-2026:3433-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

SUSE CVE-2026-17984

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-52680 Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-17862

An use after free flaw was found in the Tracing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520426287...

CVE-2026-44106

creationtimestamp| type| source ---|---|--- 2026-07-30 08:02:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5ezikuschqdok 2026-07-30 10:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mru6mgr24o2j...

CVE-2026-56850

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

CVE-2026-17878

An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522781838...

CVE-2026-16524

CVE-2026-16524 : A command injection flaw affects PCP’s linux_sockets PMDA. The vulnerability allows injection of shell metacharacters via the metric network.persocket.filter, and, due to failed validation, enables arbitrary command execution as the PMDA user during metrics refresh. The CVSSv3.1 ...

DEBIAN-CVE-2026-17965

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17761

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-64360

A flaw was found in the Linux kernel. The hfsbnoderead function within the HFS/HFS+ filesystem driver could return without fully initializing a buffer. This could lead to the use of uninitialized memory, potentially causing unpredictable system behavior or the disclosure of sensitive information...

CVE-2026-17881

The CVE-2026-17881 entry describes an Integer overflow in WebXR affecting Google Chrome before 151.0.7922.72. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: WebXR in Chrome (Chromium base). Impacted versions are prior to 151.0.7922.7...

CVE-2026-17838

The vulnerability CVE-2026-17838 affects Chrome on iOS prior to 151.0.7922.72, where an incorrect security UI could allow a remote attacker to spoof domains via a crafted HTML page. The issue is documented with a Medium severity (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) and an affected com...

CVE-2026-17755

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.6-2.2.hum1 noarch python3-3.14.6-2.2.hum1 aarch64, x8664 python3-debug-3.14.6-2.2.hum1 aarch64, x8664 python3-devel-3.14.6-2.2.hum1 aarch64, x8664...

CVE-2026-50642

A flaw was found in diff-so-fancy. The application does not properly sanitize non-SGR Select Graphic Rendition terminal control sequences, allowing other control characters and escape sequences to pass through. An attacker can embed malicious control sequences in filenames, diff metadata, or file...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...