PT-2026-127292

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue in Layout allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to open a crafted HTML page. Use after free is a memory...

UBUNTU-CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

RockyLinux 8 : kernel-rt (RLSA-2026:89082)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89082 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

AlmaLinux 8 : kernel-rt (ALSA-2026:89082)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:89082 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

AlmaLinux 8 : kernel (ALSA-2026:89083)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:89083 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

MiracleLinux 8 : kernel-4.18.0-553.178.1.el8_10 (AXSA:2026-2162:109)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2162:109 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388...

chromium -- security fixes

Chrome Releases reports: This update includes 52 security fixes: 571156746 Critical CVE-2026-118306: Memory corruption in FileSystem. 572193211 Critical CVE-2026-118331: Improper input validation in FileAPI. 574776938 Critical CVE-2026-118348: Improper input validation in Skia. 574852698 Critical...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146255 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146313 advisory. In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer an...

Linux Distros Unpatched Vulnerability : CVE-2026-116540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146141 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146346 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats...

ROS-20261027-73-0097

The vulnerability in the DigitalCredentials component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

ROS-20261027-73-0105

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Vulnerability: CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from WTF’s use-after-free behavior, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Turbolev, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the CSS parsing a...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the JavaScript:...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the Networking...