PT-2026-106357

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs during the execution of system service routines. This issue is caused by the improper handling of user input buffers, which can lead to...

Cisco ASA Code Injection (CVE-2024-20485)

A vulnerability in the VPN web server of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this...

CVE-2026-86360: Improper Limitation of a Pathname to a Restricted Directory

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-106185: Improper Input Validation

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106998

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description A confused deputy issue in the user interface allows a local attacker to bypass system access restrictions to reach a privileged page. This is achieved through a co-installed...

CVE-2026-106294: Incomplete Cleanup

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

PT-2026-107035

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in FullScreen allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...

CVE-2026-105919: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

PT-2026-106958

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in WebAppInstalls allows a remote attacker to bypass system access restrictions through the use of a crafted HTML page and social engineering. Recommendations Updat...

PT-2026-107103

In kdn set sysregs prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106967

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Chromoting on Mac allows a remote attacker to bypass system access restrictions by sending crafted network traffic. Recommendations Update to version 155.0.8059.39...

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

CVE-2026-86362: Improper Access Control

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-71168: Improper Limitation of a Pathname to a Restricted Directory

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-55307: Improper Privilege Management

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-106397: Incorrect Authorization

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106296: Improper Privilege Management

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106229: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-105921: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105808: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...