The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTML-in-Canvas component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the HTML-in-Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to elevate their privileges.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-92008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.4...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

RockyLinux 9 : firefox (RLSA-2026:69462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69462 advisory. firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client component...

Linux Distros Unpatched Vulnerability : CVE-2026-92024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

PT-2026-97640

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Wireshark versions 4.4.0 through 4.4.18 Description A buffer overflow exists in the RF4CE protocol dissector, which is a component used to analyze and interpret RF4CE network traffic. This flaw can lead t...

PT-2026-97398

Name of the Vulnerable Software and Affected Versions Moquette versions prior to 0.18.1 Description In the H2PersistentQueue component, session message-map names are derived using the prefix queue followed by the client ID, while metadata-map names use queue , the client ID, and the suffix meta. ...

PT-2026-97127

Name of the Vulnerable Software and Affected Versions recommenders-team recommenders versions prior to 1.2.2 Description A flaw in the Dict Loading component allows remote attackers to trigger deserialization. This occurs through the pickle.load function within the...

PT-2026-97518

Name of the Vulnerable Software and Affected Versions Sulu versions prior to 2.6.25 Sulu versions prior to 3.0.8 Description Sulu is an open-source PHP content management system based on the Symfony framework. A JCR-SQL2 injection exists in the Smart Content QueryBuilder within...

PT-2026-97401

Name of the Vulnerable Software and Affected Versions Neethuharii CafeManagement affected versions not specified Description A SQL injection flaw exists in the Login Handler component within the CafePortalLogin.php file. A remote attacker can exploit this by manipulating the uname argument,...

PT-2026-97611

Name of the Vulnerable Software and Affected Versions LB-Link BL-CPE600EU version 5.8.13 Description A security flaw in the Configuration Backup Handler component affects the Mifi config.bin file. This issue allows a remote attacker to cause information disclosure through the manipulation of...

PT-2026-97355

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Stored cross-site scripting occurs in the FTM UI NetworkAcknowledgement React component within the file NetworkAcknowledgement.jsx:42. A...

PT-2026-97476

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions prior to 3.7.1 Description An SQL Injection issue exists in the Shop manager component. This allows an attacker to interfere with the queries that an application makes to its database, potentially allowing them ...

PT-2026-97119

Name of the Vulnerable Software and Affected Versions Dask versions prior to 2026.8.1 Description A remote deserialization issue exists within the Loader component. The flaw is located in the from npy stack function of the dask/array/core.py file, where improper handling of input can lead to the...

PT-2026-97301

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.710 ManageEngine Firewall Analyzer versions prior to 12.8.710 Description A data exposure issue exists within the Firewall Analyzer syslog collector, which may allow sensitive information to be...

Linux Distros Unpatched Vulnerability : CVE-2026-92016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

CVE-2026-96257: Stack-based Buffer Overflow

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...