CVE-2026-59969

Apache ZooKeeper quorum TLS fails to enforce peer hostname verificatio...

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87276

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-89938

In the Linux kernel, the following vulnerability has been resolved: i...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-90008

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89849

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89876

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89991

In the Linux kernel, the following vulnerability has been resolved: b...

CVE-2026-90024

In the Linux kernel, the following vulnerability has been resolved: u...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-servic...

CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-89781

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in readlogrecbuf readlogrecbuf copies a log record into a caller buffer starting at u32 off = lsntopageofflog, lsn + log-recordheaderlen; log-recordheaderlen and log-dataoff, used for the followin...

CVE-2026-91717

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

CVE-2026-89885

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89973

In the Linux kernel, the following vulnerability has been resolved: n...

CVE-2026-90023

In the Linux kernel, the following vulnerability has been resolved: u...

CVE-2026-89859

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-90029

In the Linux kernel, the following vulnerability has been resolved: u...

CVE-2026-89888

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89895

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative...

CVE-2026-81563

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin...

CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records,...

CVE-2026-89980

In the Linux kernel, the following vulnerability has been resolved: A...

CVE-2026-89997

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-89863

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-87278

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-89880

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89803

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-89809

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-76825

RestrictedPython is a tool that helps define a subset of the Python la...

CVE-2026-89957

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89981

In the Linux kernel, the following vulnerability has been resolved: a...

CVE-2026-90037

In the Linux kernel, the following vulnerability has been resolved: N...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-89988

In the Linux kernel, the following vulnerability has been resolved: k...

CVE-2026-89851

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89852

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89783

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6inputaddr when secpath is full The depth check in xfrm6inputaddr is off by one: if 1 + sp-len == XFRMMAXDEPTH goto drop; ... sp-xvecsp-len++ = x; xfrminput can leave sp-len == XFRMMAXDEPTH,...

CVE-2026-89879

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-85501

Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the algorithmic complexity vulnerabilities. NLnet Labs Unbound up to and including 1.26.0 is...