PT-2026-81811

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...

PT-2026-81803

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...

PT-2026-81906

Kimai before 2.62.0 fails to validate create other timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view other timesheet and edit other timesheet permissions can create timesheet records for team members by submitting the QuickEntry form,...

Linux Distros Unpatched Vulnerability : CVE-2026-76816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...

The vulnerabilities of the functions nft_rbtree_gc_elem() and __nft_rbtree_insert() in the module net/netfilter/nft_set_rbtree.c of the netfilter component of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions nftrbtreegcelem and nftrbtreeinsert in the net/netfilter/nftsetrbtree.c module of the netfilter component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the __do_syscall() function in the arch/s390/kernel/syscall.c module of the S390 platform support module for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dosyscall function in the arch/s390/kernel/syscall.c module of the S390 platform support for the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-75509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3,...

PT-2026-81126

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

PT-2026-81819

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...

PT-2026-81574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81656

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81878

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.20 through 11.0.24 Apache Tomcat versions 10.1.53 through 10.1.57 Apache Tomcat versions 9.0.115 through 9.0.120 Description Improper input validation occurs due to an incomplete fix for a previous issue...

PT-2026-81611

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to...

PT-2026-81531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Workers allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-81790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

PT-2026-81657

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Navigation allows a remote attacker who has compromised the renderer process to bypass site isolation through a crafted HTML page. Site isolation is a...

PT-2026-81688

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description Improper input validation in the mobile version of the browser allows a remote attacker to bypass system access restrictions by using a specially crafted HTML page. Recommendatio...

PT-2026-81703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the NTP Footer allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...