CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements with raw setAttribute calls. An attacker who controls column...

CVE-2026-116797

Highcharts Grid Pro, versions 2.0.0 through 3.2.0 , is vulnerable to a Cross-Site Scripting (XSS) flaw via CWE-79 . The root cause is the use of raw setAttribute calls to copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements. An attacker contro...

CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements with raw setAttribute calls. An attacker who controls column...

Highcharts cross-site scripting vulnerability

Highcharts versions 2.0.0 through 3.2.0 contain a cross-site scripting vulnerability. This vulnerability arises because the input renderer copies cells.renderer.attributes and cells.editMode.renderer.attributes to input or select elements via original setAttribute calls. Attackers can then add...

WordPress Ninja Forms input validation error vulnerability

Versions of WordPress Ninja Forms prior to 3.15.4 contain an input validation error vulnerability. This flaw stems from incomplete server-side validation; unauthenticated attackers can submit arbitrary values via the nfajaxsubmit endpoint to Checkbox List, Multi-Select List, Image List, Country,...

SUSE SLES16: cpupower / cpupower-bash-completion / cpupower-bench / etc (SUSE-SU-2026:24362-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24362-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open...

K000163893: Linux kernel vulnerability CVE-2026-46148

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip select, which is automagically operated by the hardware - set low when the transmit buffer first get...

Google Chrome Edge Select Component Access

The vulnerability in the Select component of Google Chrome and Microsoft Edge web browsers is related to information disclosure due to a mismatch. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

SUSE SLED15: cpupower / cpupower-bash-completion / cpupower-devel / etc (SUSE-SU-2026:4890-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4890-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon...

openSUSE 16: cpupower / cpupower-bash-completion / cpupower-bench / etc (openSUSE-SU-2026:22155-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22155-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: Release to latest kernel-source including: intel-speed-select: Harden daemon pidfile open CVE-2026-80663 bsc1278335 cpupower: Fix...

SUSE-SU-2026:4890-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - Release to latest kernel-source including: intel-speed-select: Harden daemon pidfile open CVE-2026-80663 bsc1278335 cpupower: Fi...

Security update for cpupower (important)

openSUSE security update: security update for cpupower ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22155-1 Rating: important References: bsc1278335 Cross-References: CVE-2026-80663 CVSS scores: CVE-2026-80663 SUSE : 7.1...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 turbostat: Fix microcode patch level output for...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 turbostat: Fix microcode patch level output for...

OPENSUSE-SU-2026:22155-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

SUSE-SU-2026:24362-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

SUSE-SU-2026:24408-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

Google Chrome Edge Select Component Data Compromise

The vulnerability in the Select component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

PT-2026-120774

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux select get and devmux select set. When CONFIG USERSPACE is enabled, their user-mode verifiers z vrfy devmux select get and z vrfy devmux select set forwarded directly to the kernel implementation...