PT-2026-93158

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in Skia allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Skia is a 2D graphics library used for rendering text and images...

PT-2026-92873

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the RDBMS component of the Oracle Database Server. This issue allows an unauthenticated attacker with network access via Oracle Net to compromise the RDBMS,...

PT-2026-93127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This occurs when the system incorrectly identifies the data type of an object, which can be leveraged by a remote attacker ...

PT-2026-93138

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms, allows a remote attacker to read memory outside the sandbox by...

PT-2026-93167

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue exists in Workers, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...

Security update for hauler (critical)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21841-1 Rating: critical References: bsc1265425 bsc1278584 bsc1278934 bsc1279296 bsc1279416 Cross-References: CVE-2026-41888 CVE-2026-56854...

GHSA-VRH8-C9CM-WH8V

creationtimestamp| type| source ---|---|--- 2026-09-14 23:32:13+00:00| seen| https://gist.github.com/alon710/5201f77ce91c5d1ec9edcecc53a2d050 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/5201f77ce91c5d1ec9edcecc53a2d050...

CVE-2026-89461

creationtimestamp| type| source ---|---|--- 2026-09-14 21:10:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117271442317769675 2026-09-14 21:20:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvj225kb6b2b 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-90961

creationtimestamp| type| source ---|---|--- 2026-09-14 15:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvifvz2uiq2g 2026-09-14 16:07:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mviikrvwar2p...

Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Important: Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.4 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 115.0.5790.98, using tab groups with free in Google Chrome allowed a remote attacker who convinced a user to perform certain UI interactions to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Web Browser UI of Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Python 3.11, Python 2.7, Python 3.7, and Pypy

There is a medium-severity vulnerability affecting CPython. Regular expressions that allow excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS through specifically crafted tar archives...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in PWA implementations in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent, through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A bad cast in Dawn, in Google Chrome before version 149.0.7827.53, allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...