GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: falcoctl, teleport-operator-fips, kubescape, crossplane-provider-azure-managedidentity, crossplane-provider-azure-relay, crossplane-provider-azure-servicelinker, crossplane-provider-azure-storage, traefik, kubernetes-dashboard, kaf, podman, chisel-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: falcoctl, teleport-operator-fips, kubescape, crossplane-provider-azure-managedidentity, crossplane-provider-azure-relay, crossplane-provider-azure-servicelinker, crossplane-provider-azure-storage, traefik, kubernetes-dashboard, kaf, podman, chisel-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, traefik, kubernetes-dashboard, kaf, chisel-fips, seaweedfs-rocksdb, kine, prometheus, loki, terraform, tekton-pipelines-fips, grafana, cloudbeat-fips, k9s, nemo, knative-kafka-broker, harbor, flux-fips, frankenphp-8.4, gitlab-workhorse-ce, k9s-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, kubescape, traefik, kubernetes-dashboard, kaf, podman, act, kine, prometheus, apko, loki, terraform, prometheus-podman-exporter-fips, tekton-pipelines-fips, grafana, cloudbeat-fips, pulumi, packer-fips, k9s, nemo, mapotf, knative-kafka-broker,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, kubescape, traefik, kubernetes-dashboard, kaf, podman, longhorn-manager-fips, chisel-fips, seaweedfs-rocksdb, act, kine, longhorn-cli-fips, prometheus, apko, loki, docker-cli-buildx, terraform, prometheus-podman-exporter-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: syft, argocd-image-updater, witness, slsa-verifier, k9s, dagger, external-secrets-operator, pulumi-language-java, tkn, docker, glab, flux-image-automation-controller, nuclei, osv-scanner, argo-cd, crossplane-provider-azure-storage, rootlesskit, tflint, k8sgpt, melang...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, telegraf, argocd-image-updater, trivy, cert-manager, kubernetes, kubernetes-dashboard, skaffold, nerdctl, zot, falco-no-driver, kine, chisel, flux-source-controller, trivy-operator, k3s, kaf, k9s, loki, containerd,...

CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or...

CVE-2016-20088

The CVE refers to Comodo Chromodo Browser version 52.15.25.664 with an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to place a malicious executable in the service path and achieve arbitrary code execution with elevated privi...

Chromium: CVE-2026-12468 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-12468

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521485244...

SUSE CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-37518

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-12468

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...