PT-2026-68718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An out of bounds write occurs in Skia, a graphics library used for rendering. This issue allows a remote attacker who has already compromised the renderer process to potentially achiev...

PT-2026-68714

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in Contextual Tasks allows a remote attacker to perform privilege escalation through the use of a crafted HTML page. Recommendations Update...

PT-2026-68722

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in the UI allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved...

PT-2026-68691

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...

PT-2026-68689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue in HTML allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. Use after free is a memory corruption flaw that occurs when ...

PT-2026-68684

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A race condition exists in the CredentialProvider component on Windows. This flaw allows a local attacker to achieve OS-level privilege escalation by utilizing a malicious file...

PT-2026-68712

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An integer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to leak cross-origin data. This is achieved by inducing the browser t...

PT-2026-68703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in Views on Windows. A remote attacker can exploit heap corruption—a condition where memory is corrupted in the heap area—by convincing a user to perform...

PT-2026-68713

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An inappropriate implementation in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox by inducing a user to visit a specially crafted HTML page. V8 is th...

PT-2026-68701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the Base component. This occurs when an attacker convinces a user to install a malicious extension, allowing the exploitation of heap corruption throug...

PT-2026-68710

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists within the Extensions component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. An...

PT-2026-68687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in Views, where a remote attacker could potentially exploit heap corruption—a condition where memory allocated on the heap is corrupted—via a crafted HTML...

PT-2026-68704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in Views, where a remote attacker could potentially exploit heap corruption through a crafted HTML page. This exploitation requires the attacker to convin...

PT-2026-68688

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in WebAPKs allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a security...

PT-2026-68690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Translate component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-68817

Name of the Vulnerable Software and Affected Versions h2 versions prior to 4.4.1 Description The software accepts request header blocks containing multiple Host headers and forwards all of them to the consuming application. When the consumer downgrades the connection from HTTP/2 to HTTP/1.1, the...

PT-2026-68591

Name of the Vulnerable Software and Affected Versions Thrive Architect versions prior to 10.9.3.2 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Thrive Architect...

PT-2026-68521

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description An SQL Injection issue exists in the apr dbd oracle provider. This occurs due to the improper neutralization of special elements used in an SQL command, which could allow...

PT-2026-68821

Name of the Vulnerable Software and Affected Versions udisks2 affected versions not specified Description Insufficient authorization checking in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method allows a local attacker with an active console session to spoof the as-user parameter. This...

PT-2026-68498

Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4 Description The function apr password validate does not operate in constant-time when comparing hashes or passwords. This behavior can lead to the leakage of sensitive content through a side channel timing...

PT-2026-68623

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Open Redirect issue exists in the HTML5 scrubber of the software. A remote attacker can force visitors to navigate to an untrusted site by inserting a element into sanitized HTML. Th...

PT-2026-68624

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Inclusion of Functionality from Untrusted Control Sphere issue exists in the HTML5 scrubber. A remote attacker can load an arbitrary document into a trusted page by utilizing the dat...

PT-2026-68696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

PT-2026-68695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An inappropriate implementation in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox by inducing a user to visit a specially crafted HTML page. V8 is th...

PT-2026-68706

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An uninitialized use in Skia allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. Skia is an open source 2D graphics...

PT-2026-68702

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An out of bounds write occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on top of other graphics APIs. This issue allows a remote attacker to...

PT-2026-68699

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Use after...

PT-2026-68719

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An integer overflow in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page. V8 is the open-sour...

PT-2026-68686

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in Resources. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...

PT-2026-68685

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the GPU component. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...

PT-2026-68705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An uninitialized use in Skia allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. Skia is an open source 2D graphics...

PT-2026-68715

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL, which could allow a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use...

PT-2026-68708

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Media component on Windows. This flaw allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox...

PT-2026-68717

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in Views, where a remote attacker who has already compromised the renderer process could potentially achieve a sandbox escape by using a specially crafted...

PT-2026-68780

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 architecture where the Safe-RET mitigation is susceptible to interrupt injection on machines affected by Speculative Return Stack Overflow SRSO, a condition...

PT-2026-68235

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description An issue exists involving improper restriction of operations within the bounds of a memory buffer. This is categorized under CWE-119, which refers to memory corruption...

PT-2026-68234

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description Improper access control issues were identified during an internal security review. These issues fall under the Common Weakness Enumeration CWE Pillar CWE-284, which refers to...

PT-2026-68328

Name of the Vulnerable Software and Affected Versions rclone versions 1.40.0 through 1.74.0 Description The serve restic command fails to properly reject URL paths starting with ../ in the WithRemote function within cmd/serve/restic/restic.go. This allows a leading parent path to be passed to GET...

PT-2026-68333

Name of the Vulnerable Software and Affected Versions rclone versions 1.51.0 through 1.74.0 Description The local backend in backend/local/local.go relies on a configurable filename encoder to prevent remote filename data from being interpreted as operating-system path syntax. When a local...

PT-2026-68232

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with low privileges to execute arbitrary commands on the underlying operating system and elevate...

PT-2026-68329

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses using http.ReadResponse over an unrestricted buffered reader. This allows a malicious or compromised proxy, or an...

PT-2026-68262

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.576 Jenkins LTS versions prior to 2.568.2 Description Jenkins fails to safely handle symbolic links with effectively empty names when extracting .tar and .tar.gz archives. This allows attackers who control agent...

PT-2026-68330

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description A flaw in the FTP filename encoding within backend/ftp/ftp.go allows the restoration of raw Carriage Return CR and Line Feed LF characters. These characters can be placed immediately before an...

PT-2026-68241

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system and elevate...

PT-2026-68195

Name of the Vulnerable Software and Affected Versions Ghost versions 4.9.0 through 6.54.0 Description An input validation issue allows any staff user to create a post containing malicious content within the feature image caption variable. This can be exploited to hijack the Ghost Admin session of...

PT-2026-68174

Name of the Vulnerable Software and Affected Versions CCleaner versions prior to 7.10.1464 Description A link following issue exists in the Uninstaller component on Windows. A local, low-privileged attacker can escalate privileges to SYSTEM by creating a symlink or junction during the application...

PT-2026-67950

Name of the Vulnerable Software and Affected Versions OpenStack Neutron versions prior to 28.0.2 Description The subnetpool onboarding API fails to verify the ownership of target subnets. This allows an authenticated user to onboard subnets belonging to another project's shared network into their...

PT-2026-68090

Name of the Vulnerable Software and Affected Versions Rancher versions 2.11.0 through 2.11.15 Rancher versions 2.12.0 through 2.12.11 Rancher versions 2.13.0 through 2.13.7 Rancher versions 2.14.0 through 2.14.1 Description A privilege escalation issue exists in the impersonation middleware locat...

PT-2026-68263

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.576 Jenkins LTS versions prior to 2.568.2 Description Improper identification of file paths attempting path traversal in file parameter names allows attackers with Item/Configure and Item/Build permissions to write...

PT-2026-68264

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.576 Jenkins LTS versions prior to 2.568.2 Description Inconsistent handling of case-insensitivity in user and group names allows attackers with the ability to create new users or groups to impersonate other users or...