CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

CVE-2026-79657

NLTK versions before 3.10.3 contain a remote code execution vulnerabil...

CVE-2026-74673

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

CVE-2026-74617

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-74644

security update...

CVE-2026-74728

In the Linux kernel, the following vulnerability has been resolved: x...

CVE-2026-74634

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...

CVE-2026-74672

security update...

CVE-2026-74698

In the Linux kernel, the following vulnerability has been resolved: n...

CVE-2026-74683

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index the static counts array in evdevgetmaskcnt and client evmasks array i...

CVE-2026-74674

In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zappterange reclaims a page table, it does: ptefreetlbtlb, pmdpgtablepmdval, addr; and this is unconditionally wrong: if this code executes, addr always points one...

CVE-2026-79674

NLTK versions before 3.10.3 contain a path sandbox bypass vulnerabilit...

CVE-2026-79288

Improper input validation in Autofill in Google Chrome on on Android p...

CVE-2026-77806

security update...

CVE-2026-74740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allow...

CVE-2026-74641

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

CVE-2026-76021

security update...

CVE-2026-80532

In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list pointers based on what it finds on disk and in memory before we move ...

CVE-2026-79154

Missing authorization in DevTools in Google Chrome prior to 152.0.7977...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65...

CVE-2026-79179

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65...

CVE-2026-79260

Improper input validation in Cookies in Google Chrome prior to 152.0.7...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.797...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a rem...

CVE-2026-78976

Improper input validation in StorageAccessAPI in Google Chrome prior t...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152...

CVE-2026-78977

Uninitialized resource in GPU in Google Chrome on on Android prior to...

CVE-2026-78980

Improper input validation in ReaderMode in Google Chrome prior to 152...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.79...

CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.79...

CVE-2026-79270

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.6...

CVE-2026-79239

Out of bounds read in Tint in Google Chrome on on Android prior to 152...

CVE-2026-79259

Improper input validation in Safebrowsing in Google Chrome prior to 15...

CVE-2026-79217

Incorrect authorization in Mobile in Google Chrome on on iOS prior to...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrom...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android...

CVE-2026-74629

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmbclientidarr A dibs device interrupt handler can be active after dibsdevdel and may still access dmbclientidarr. UAF In case of a failure in dibsdevadd being called by dibslodevprobe dmbclientidarr ...

CVE-2026-75421

aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFil...

CVE-2026-74732

security update...

CVE-2026-78907

Incorrect authorization in WebProtect in Google Chrome prior to 152.0...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 all...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.6...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977...

CVE-2026-78991

Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 a...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.6...

CVE-2026-79028

Observable discrepancy in Network in Google Chrome prior to 152.0.7977...

CVE-2026-79059

Information leak in BFCache in Google Chrome prior to 152.0.7977.65 al...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...