CVE-2026-118320

A memory corruption flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568894515...

CVE-2026-118317

A memory corruption flaw was found in the HTML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568730797...

CVE-2026-118315

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575184164...

CVE-2026-118314

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574803484...

CVE-2026-118313

An use after free flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574032795...

CVE-2026-118311

A memory corruption flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573938968...

CVE-2026-118307

An use after free flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570675085...

CVE-2026-118304

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574101376...

CVE-2026-117971

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Print Preview component...

CVE-2026-117965

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Address Bar component...

CVE-2026-117964

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Panning and Zooming component...

CVE-2026-118599

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

CVE-2026-99138

A flaw was found in the Linux kernel. A local user could exploit this use-after-free vulnerability to escalate privileges or cause a Denial of Service DoS. The issue occurs when querying Transmission Control Protocol TCP socket options without proper locking, causing the kernel to access memory...

CVE-2026-118312

A memory corruption flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540025369...

CVE-2026-116774

A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service DoS by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and...

CVE-2026-117500

A flaw was found in HTTP::Body. A remote attacker could cause a Denial of Service DoS by submitting a specially crafted multipart upload request with a malformed filename. Inefficient regular expression processing causes excessive backtracking when parsing the filename, which exhausts CPU resourc...

CVE-2026-116135

A flaw was found in HTTP::Body. When processing URL-encoded form submissions, the module removes mixed-case percent escapes instead of decoding them into their corresponding characters. A remote attacker can exploit this parsing discrepancy by submitting specially crafted requests, potentially...

CVE-2026-99148

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. When closing a handle to a shared graphics buffer object, the driver prematurely detaches its eviction fence before verifying whether active references remain. A local user could exploit this vulnerability to trigger the premature...

CVE-2026-118752

A flaw was found in FreeImage. This vulnerability allows an attacker to achieve arbitrary code execution or cause an application crash leading to a Denial of Service DoS by tricking a user or automated system into processing a specially crafted image file. The issue occurs due to a heap-based...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-117949

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-117954

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Positioned component...

CVE-2026-117951

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-117941

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: CSS Object Model component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-117936

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-117935

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Bindings WebIDL component...

CVE-2026-118355

An improper input validation flaw was found in the Command component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570638833...

CVE-2026-118342

An out of bounds write flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574412629...

CVE-2026-118332

An improper input validation flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574030524...

CVE-2026-118321

An improper input validation flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568937139...

CVE-2026-118316

An improper input validation flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574223268...

CVE-2026-118310

An improper input validation flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574516887...

CVE-2026-118309

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576133777...

CVE-2026-118308

An use after free flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574791952...

CVE-2026-118306

A memory corruption flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/571156746...

CVE-2026-118305

A memory corruption flaw was found in the Turbolev component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568348290...

CVE-2026-117931

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Events component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-117930

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Bindings WebIDL component...

CVE-2026-117927

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-117925

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-117920

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component...

CVE-2026-117919

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-117916

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XSLT component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-117913

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-117902

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-117906

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component...

CVE-2026-116531

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS or unexpected request processing by sending specially crafted chunked HTTP requests. This issue occurs because the module fails to properly track chunk boundaries when reading chunked request bodies. As a result,...

CVE-2026-117501

A flaw was found in HTTP::Body. By sending crafted chunked HTTP requests with malformed chunk sizes, a remote attacker can cause the parser to continuously buffer incoming data in memory. This issue leads to excessive memory consumption, resulting in a Denial of Service DoS for the affected...

CVE-2026-116795

A flaw was found in re2js. When lookbehind assertions are enabled, repeated regular expression matching can cause the engine to repeatedly rescan input text from the beginning, leading to quadratic processing time. A remote attacker could supply crafted input to monopolize worker thread resources...