Google Chrome Vulnerability: CVE-2026-118308

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146300 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgenchangename replaces pktdev-entry while holding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146265 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146334 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in gtpencapdestroy. syzkaller reported use-after-free in gtpencapdestroy....

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146286 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucvhsrcv afiucvhsrcv looks up the destinatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146263 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipcl2sendmsg Syzbot reported a slab-use-after-free in ipvlanhardheader when...

Linux Distros Unpatched Vulnerability : CVE-2026-98991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already...

AlmaLinux 8 : libreswan (ALSA-2026:90492)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90492 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146272 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-sl...

Linux Distros Unpatched Vulnerability : CVE-2026-98982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child...

PT-2026-127278

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use aft...

PT-2026-127293

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to open...

PT-2026-127295

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the FileSystem component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted...

RockyLinux 9 : python3.9 (RLSA-2026:89742)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89742 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification...

kernel security, bug fix, and enhancement update

5.14.0-687.61.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Widget component, potentially leading to sandbox...

CentOS Linux 8 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793091465)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793091465 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the libra...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146280)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146280 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the...

PT-2026-127287

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in the DOM’s Events component, which may lead to memory corruption or arbitrary code execution...