CVE-2026-17876

An inappropriate implementation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522425471...

CVE-2026-17892

An inappropriate implementation flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524822998...

CVE-2026-17888

An insufficient validation of untrusted input flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523720529...

CVE-2026-17847

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518243653...

CVE-2026-17860

An insufficient validation of untrusted input flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520407381...

CVE-2026-17897

An inappropriate implementation flaw was found in the ORB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=527665262...

CVE-2026-17872

A cryptographic flaw flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521963740...

CVE-2026-17819

An inappropriate implementation flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517487028...

CVE-2026-17885

An inappropriate implementation flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523698038...

CVE-2026-17851

A side-channel information leakage flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519243927...

CVE-2026-17893

An insufficient validation of untrusted input flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524824730...

CVE-2026-17845

An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518112775...

CVE-2026-17821

An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517597914...

CVE-2026-17861

An insufficient validation of untrusted input flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520417861...

CVE-2026-17854

An insufficient policy enforcement flaw was found in the WebMCP component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519500882...

CVE-2026-17886

An use after free flaw was found in the Enterprise component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523715964...

CVE-2026-17875

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522299155...

CVE-2026-17832

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517723319...

CVE-2026-17894

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524825209...

CVE-2026-17836

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517972812...

CVE-2026-17895

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524931675...

CVE-2026-17825

An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517675979...

CVE-2026-17859

A side-channel information leakage flaw was found in the Favicons component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520196753...

CVE-2026-17855

A race flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519982572...

CVE-2026-17844

An insufficient validation of untrusted input flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518111542...

CVE-2026-17824

An insufficient policy enforcement flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517655543...

CVE-2026-17870

An insufficient validation of untrusted input flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521784856...

CVE-2026-17881

An use after free flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523477987...

CVE-2026-17887

An use after free flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523717010...

CVE-2026-17850

An inappropriate implementation flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519078527...

CVE-2026-17864

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520494861...

CVE-2026-17827

An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517693726...

CVE-2026-17857

An inappropriate implementation flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520186620...

CVE-2026-17883

A flaw was found in Google Chrome's Headless mode. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass the Same-Origin Policy SOP, a security mechanism that prevents web pages from interacting...

CVE-2026-68562

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and cop...

CVE-2026-68563

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...

CVE-2026-18157

A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...

CVE-2026-58216

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...

CVE-2026-56850

A flaw was found in Node.js. The HTTPS Agent, responsible for managing secure connections, can incorrectly reuse client identities across different requests. This occurs due to a technical issue with PFX object-array key collisions during connection reuse. As a result, a client's identity,...

CVE-2026-50046

A use-after-free flaw was found in Unbound's DNS-over-TLS DoT forwarded query handling. A remote attacker can exploit a timing error during TLS handshake failures on a server under load to trigger a daemon crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, avoid...

CVE-2026-47078

A flaw was found in the Erlang OTP stdlib zip module. The zip:unzip and zip:extract functions, which handle archive extraction, are vulnerable to a relative path traversal attack. A remote attacker could craft a malicious zip archive containing specially formed entry names. When processed, this...

CVE-2026-46678

A flaw was found in Pydantic AI, a Python agent framework for building Generative AI applications. When an application is configured to allow local file downloads from untrusted URLs, a Server-Side Request Forgery SSRF vulnerability exists. This flaw allows an attacker to bypass existing security...

CVE-2026-54620

A flaw was found in sqlite3-ruby, a Ruby binding for the SQLite3 embedded database. This vulnerability occurs because callbacks used for SQLite aggregate functions can be prematurely freed while still being referenced during aggregation. A local attacker could potentially exploit this...

CVE-2026-16631

A flaw was found in publint. A local attacker can exploit an operating system OS command injection vulnerability by manipulating input processed by the childprocess.exec function. This allows the attacker to execute arbitrary commands on the system where publint is running, potentially leading to...

CVE-2026-54249

A flaw was found in pydantic-ai. A remote attacker could exploit this vulnerability by submitting crafted message history containing unvalidated file references. This could trick the server into reading arbitrary files from its own cloud storage accounts, such as Amazon S3 or Google Cloud Storage...

CVE-2026-25707

A flaw was found in libzypp. A remote attacker could exploit a relative path traversal vulnerability when processing repository metadata. By supplying malicious repositories, an attacker could overwrite arbitrary files on the system. This could lead to privilege escalation or a denial of service...

CVE-2026-46582

A flaw was found in Unbound, a Domain Name System DNS resolver. A remote attacker can exploit a vulnerability in how Unbound handles expired DNSSEC DNS Security Extensions records. By injecting a replayed wildcard record set, an attacker can cause Unbound to temporarily consider it secure, leadin...

CVE-2026-58222

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-52863

A flaw was found in Unbound, a validating, recursive, and caching Domain Name System DNS resolver. When configured with specific modules and under heavy load, a memory corruption vulnerability can occur due to improper handling of view names during subquery processing. This issue could lead to a...

CVE-2026-58218

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...