AlmaLinux 9 : kernel (ALSA-2026:86033)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

Linux Distros Unpatched Vulnerability : CVE-2026-113197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-113075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-113115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

CVE-2025-60478

The GPAC Project/MP4Box software (versions before 2.5 ) is vulnerable to a use-after-free flaw located in the gf_filter_packet_destroy function within /filter_core/filter_pck.c. An attacker can exploit this vulnerability by supplying a crafted MPEG-2 file to cause a Denial of Service (DoS) . Whil...

CVE-2025-60490

A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

ALSA-2026:86907 Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

Linux Distros Unpatched Vulnerability : CVE-2026-112999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Protection Is Not One Event: A Survey of RAG Protection Research by Measured Endpoint

Retrieval-augmented generation RAG systems face security, privacy, and copyright risks including content leakage, source reconstruction, unauthorized access, data poisoning, and prompt injection. Yet RAG protection studies use incompatible evaluation metrics, datasets, and threat models. We prese...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Chromecast Component DoS

The vulnerability in Google Chrome and Microsoft Edge’s web browsers is related to use-after-free memory usage. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

WebRTC Component DoS

The WebRTC component vulnerability in Google Chrome and Microsoft Edge web browsers is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...