CVE-2026-17754

An inappropriate implementation flaw was found in the Blink component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501675996...

CVE-2026-13577

A flaw was found in Dancer2. When Cryptographically Secure PseudoRandom Number Generator CSPRNG modules are not available, Dancer2 generates insecure session identifiers IDs. This occurs because the system falls back to using a less secure, built-in random number generator. An attacker could...

CVE-2026-17663

An insufficient validation of untrusted input flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500225310...

CVE-2026-17659

An inappropriate implementation flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495463654...

CVE-2026-17653

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520514458...

CVE-2026-17671

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513257423...

CVE-2026-44909

A flaw was found in Proxygen. A remote, unauthenticated attacker could exploit a missing slow-consumer detection mechanism in the HTTP/2 protocol. By manipulating HTTP/2 flow-control settings, an attacker can force the server to buffer large amounts of data in memory indefinitely. This can lead t...

CVE-2026-17697

A type confusion flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517575864...

CVE-2026-17710

An inappropriate implementation flaw was found in the MHTML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519991712...

CVE-2026-17672

An insufficient validation of untrusted input flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513375270...

CVE-2026-17699

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517785292...

CVE-2026-17714

An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521293438...

CVE-2026-17689

An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517045160...

CVE-2026-17690

An insufficient validation of untrusted input flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517129282...

CVE-2026-17712

A race flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520535595...

CVE-2026-17716

An use after free flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521866061...

CVE-2026-17682

An integer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516837126...

CVE-2026-17869

An out of bounds read flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521759269...

CVE-2026-18022

A flaw was found in pgvector. An integer wraparound vulnerability exists during the IVFFlat index build process. This flaw allows a database user on a 32-bit system to write data outside of allocated memory buffers. Successful exploitation could lead to arbitrary code execution...

CVE-2026-17679

An insufficient validation of untrusted input flaw was found in the Print Preview component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516430649...

CVE-2026-17673

An integer overflow flaw was found in the QUIC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513735177...

CVE-2026-17677

An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513921488...

CVE-2026-64469

A flaw was found in the Linux kernel's binder component. This vulnerability allows a local attacker to trigger a use-after-free error due to a race condition during specific thread and process operations. Successful exploitation could lead to arbitrary code execution, granting the attacker...

CVE-2026-17907

A flaw was found in Google Chrome's Network component. A remote attacker could exploit this side-channel information leakage vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to leak sensitive cross-origin data...

CVE-2026-17878

An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522781838...

CVE-2026-17853

An inappropriate implementation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519472272...

CVE-2026-17732

An inappropriate implementation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=476646486...

CVE-2026-17781

An inappropriate implementation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513502990...

CVE-2026-64327

A flaw was found in the Linux kernel's FunctionFS ffs module, which handles USB gadget functionality. This vulnerability occurs because the endpoint direction epfile-in was not correctly initialized until a USB host connected. Consequently, early operations initiated by userspace programs could...

CVE-2026-17808

An uninitialized use flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516778390...

CVE-2026-17778

A flaw was found in Google Chrome. This use-after-free vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within a sandbox. This can be exploited by convincing a user to install a specially crafted Chrome Extension...

CVE-2026-17975

An inappropriate implementation flaw was found in the IME component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519233776...

CVE-2026-64407

A flaw was found in the Linux kernel's Bluetooth driver. A malicious Bluetooth controller could send a specially crafted firmware download request that causes an out-of-bounds read. This allows the driver to read memory beyond the intended firmware data and send it back over the Universal...

CVE-2026-17823

A flaw was found in Google Chrome's WebXR component. This vulnerability, caused by insufficient policy enforcement, could allow a remote attacker to bypass the same-origin policy. By crafting a malicious HTML page, an attacker could exploit this to gain unauthorized access to sensitive informatio...

CVE-2026-17858

An uninitialized use flaw was found in the WebNN component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520191468...

CVE-2026-17865

An inappropriate implementation flaw was found in the Crypto component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520516655...

CVE-2026-64333

A flaw was found in the Linux kernel's digiacceleport USB serial driver. This vulnerability allows a local attacker with access to the affected USB serial device to corrupt the write buffer due to improper handling of write operations and timeouts. This could lead to arbitrary code execution,...

CVE-2026-64258

A flaw was found in the fuse-uring component of the Linux kernel. When a copy operation to the userspace ring buffer fails, a request can be terminated improperly, leading to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial...

CVE-2026-64504

A flaw was found in the Linux kernel's bmc150 accelerometer driver. A malicious or malfunctioning accelerometer device, or an attacker tampering with the I2C/SPI bus, can report an excessively large number of FIFO frames. This improper handling of the frame count leads to a stack out-of-bounds...

CVE-2026-64510

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI Non-Volatile Memory NVM Firmware Interface Table NFIT core. Improper error handling during the initialization process can leave a dangling pointer. A local attacker could potentially trigger an ACPI Machine Che...

CVE-2026-17735

An insufficient validation of untrusted input flaw was found in the BFCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496569497...

CVE-2026-17928

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513762372...

CVE-2026-16530

A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...

CVE-2026-64426

A flaw was found in the Linux kernel's iouring/nop component. A local user could exploit this by submitting a specially crafted no-operation NOP request. This could lead to a file reference not being properly released, resulting in a memory leak. Over time, this memory leak could impact system...

CVE-2026-64381

A flaw was found in the SMB client of the Linux kernel. A remote attacker could exploit a memory leak in the receiveencryptedstandard function by sending specially crafted compound Protocol Data Units PDUs. This vulnerability occurs because a buffer is allocated before a necessary size check,...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service. Mitigation To mitigate this issue, restrict network access to TC...

CVE-2026-16527

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover. Mitigation To mitigate this issue, restrict network access ...

CVE-2026-16529

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads. Mitigation To mitigate this issue,...

CVE-2026-64527

A flaw was found in the drm/hyperv component of the Linux kernel. The hypervreceivesub function, responsible for processing VMBus packets, does not adequately validate the size of incoming data. This oversight allows a malicious or compromised host to send specially crafted packets, potentially...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. Mitigation To mitigate this vulnerability, ensure that the linuxsockets PMDA is not configured to...