Astra Linux – Vulnerability in Chromium

The use of after-free in FileSystem in Google Chrome before 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: High...

ROOT-OS-DEBIAN-13-CVE-2016-9580 CVE-2016-9580 in rootio-openjpeg2 - Patched by Root

Root has patched CVE-2016-9580 in the rootio-openjpeg2 package for Root:Debian:13. Multiple fixed versions available...

New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs...

RHSA-2026:42122 Red Hat Security Advisory: sssd security update

Bulletin has no description...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

USN-8597-1: Linux kernel (IBM) vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion, opal, datahub-ingestion-fips, awx, checkov...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: keep-fips, langfuse-fips, prism, vitess, wazuh-dashboard, yaml-language-server, librechat, wazuh-dashboard-fips, opensearch-dashboards, unleash, nextcloud-server, unleash-proxy, kibana, argo-workflows, arangodb, langfuse, gemini-cli, keep, tileserver-gl, unleash-fips...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

USN-8576-2 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8575-2: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

...

DNS Cookie bypass when combined with proxy-protocol use

...

EUVD-2026-47930

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

'max-global-quota' reset by DNSSEC validation restarts

...

EUVD-2026-47933

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0...

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...