Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebRTC in Google Chrome prior to version 149.0.7827.155 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in browsers with Google Chrome before version 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Input mechanism in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

RHSA-2026:43401 Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.4 release and security update

Bulletin has no description...

EUVD-2026-47914

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-64799

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

EUVD-2026-47915

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, label-studio, wazuh-manager-fips, apache-beam-python-3.12-sdk, barman, kubeflow-volumes-web-app, metaflow-service-fips, datahub-ingestion-fips, mlflow, spamcheck, k8s-sidecar, metaflow-service, azureml-inference-server-http-fips, dbt-bigquery,...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: label-studio, ansible-operator, opal, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, wazuh-manager-fips, pypy-3.10, openstack-placement-2026.1-fips, mlflow-fips, openstack-horizon-2026.1, openstack-horizon-2025.1, openstack-glance-2026.1-fips,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, label-studio, wazuh-manager-fips, apache-beam-python-3.12-sdk, barman, kubeflow-volumes-web-app, metaflow-service-fips, datahub-ingestion-fips, mlflow, spamcheck, k8s-sidecar, metaflow-service, azureml-inference-server-http-fips, dbt-bigquery,...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, label-studio, wazuh-manager-fips, apache-beam-python-3.12-sdk, barman, kubeflow-volumes-web-app, metaflow-service-fips, datahub-ingestion-fips, mlflow, spamcheck, k8s-sidecar, metaflow-service, azureml-inference-server-http-fips, dbt-bigquery,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: label-studio, ansible-operator, opal, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, wazuh-manager-fips, pypy-3.10, openstack-placement-2026.1-fips, mlflow-fips, openstack-horizon-2026.1, openstack-horizon-2025.1, openstack-glance-2026.1-fips,...

openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)

A flaw was found in OpenJDK. 1 DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2 Missing bounds check in the DataView constructor fails to validate the capacity...

openjdk: Enhance XBM image support (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...