GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: tigera-operator, helm, nerdctl, terraform, k3s, argo-workflows-fips, kubescape-server, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu, knative-kafka-broker, skaffold-fips, drone, trivy-operator, minio-fips, kaf,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: grype-db, ko-fips, caddy, cg, tigera-operator, crossplane-provider-azure-synapse, chainctl, helm, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, cosign, crossplane-provider-azure-policyinsights, gitlab-runner-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm, nerdctl, terraform, k3s, argo-workflows-fips, kubescape-server, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu, knative-kafka-broker, skaffold-fips, drone, trivy-operator, minio-fips, kaf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: grype-db, ko-fips, caddy, cg, tigera-operator, crossplane-provider-azure-synapse, chainctl, helm, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, cosign, crossplane-provider-azure-policyinsights, gitlab-runner-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: grype-db, cg, tigera-operator, helm, chainctl, nerdctl, terraform, k3s, apko, argo-workflows-fips, kubescape-server, gomplate, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu, knative-kafka-broker, skaffold-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: grype-db, cg, tigera-operator, helm, chainctl, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: grype-db, cg, tigera-operator, helm, chainctl, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, loki, mattermost, zot, mods, rootlesskit, falcoctl, apko, pulumi-language-java, fulcio, dagger, kubernetes-dashboard, telegraf, terragrunt, cilium, rancher-machine, openbao, age, crossplane-provider-family-azure, step-kms-plugin, chisel,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, helm, minio, flux, trivy, kine, spire-server, istio, loki, gitlab-kas, mattermost, zot, rancher, snyk-cli, vitess, kots, flux-source-controller, aactl, external-dns, prometheus-operator, gitea, rancher-agent, kubernetes, k9s, containerd, kubescape...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...