CVE-2026-116794

A flaw was found in russh. When processing signing requests for SSH keys configured to require explicit confirmation, the SSH agent server component fails to invoke the confirmation check and automatically returns success. A local process or remote user with access to the forwarded SSH agent sock...

CVE-2026-99139

A flaw was found in the Linux kernel's Transmission Control Protocol TCP subsystem. A race condition occurs when querying TCP congestion control settings without proper locking, which can allow dynamically allocated memory to be released while still being read. A local attacker can exploit this...

CVE-2026-110747

A flaw was found in jackson-dataformat-protobuf. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Protocol Buffers protobuf message. An integer overflow in length validation allows malformed map entry keys with excessively large declared lengths to bypass size...

CVE-2026-104016

A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...

CVE-2026-75347

A flaw was found in opener. This flaw allows a remote attacker to cause a Denial of Service DoS due to an expired pointer dereference in the EtherNet/IP Common Packet Format CPF handling logic. By sending specially crafted network packets, an attacker can trigger invalid memory access, causing th...

CVE-2026-117987

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component...

CVE-2026-117986

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component...

CVE-2026-117974

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XML component...

CVE-2026-118351

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570825067...

CVE-2026-118354

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936430...

CVE-2026-118348

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574776938...

CVE-2026-118340

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936530...

CVE-2026-118329

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568900535...

CVE-2026-118359

A memory corruption flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573378812...

CVE-2026-118358

A memory corruption flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572191610...

CVE-2026-118357

An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562191732...

CVE-2026-118356

An use after free flaw was found in the WTF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575851252...

CVE-2026-118353

An use after free flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572312175...

CVE-2026-118349

A memory corruption flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572422506...

CVE-2026-118352

A memory corruption flaw was found in the Cache component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569674221...

CVE-2026-118350

An use after free flaw was found in the Turbolev component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567129324...

CVE-2026-118347

An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574911589...

CVE-2026-118343

An improper input validation flaw was found in the ReadingList component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573389782...

CVE-2026-118346

An use after free flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574382050...

CVE-2026-118344

An use after free flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574852698...

CVE-2026-118341

An use after free flaw was found in the Modularization component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574911701...

CVE-2026-118339

An use after free flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567645136...

CVE-2026-118336

An improper input validation flaw was found in the Headless component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572111820...

CVE-2026-118335

An improper input validation flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574606539...

CVE-2026-118334

An use after free flaw was found in the ImageCapture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574027204...

CVE-2026-118331

An improper input validation flaw was found in the FileAPI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572193211...

CVE-2026-118330

An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575090745...

CVE-2026-118328

An improper input validation flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570927027...

CVE-2026-118327

A memory corruption flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572878518...

CVE-2026-118320

A memory corruption flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568894515...

CVE-2026-118317

A memory corruption flaw was found in the HTML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568730797...

CVE-2026-118315

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575184164...

CVE-2026-118314

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574803484...

CVE-2026-118313

An use after free flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574032795...

CVE-2026-118311

A memory corruption flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573938968...

CVE-2026-118307

An use after free flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570675085...

CVE-2026-118304

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574101376...

CVE-2026-117971

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Print Preview component...

CVE-2026-117965

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Address Bar component...

CVE-2026-117964

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Panning and Zooming component...

CVE-2026-118599

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

CVE-2026-99138

A flaw was found in the Linux kernel. A local user could exploit this use-after-free vulnerability to escalate privileges or cause a Denial of Service DoS. The issue occurs when querying Transmission Control Protocol TCP socket options without proper locking, causing the kernel to access memory...

CVE-2026-118312

A memory corruption flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540025369...

CVE-2026-116774

A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service DoS by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and...