CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.6...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.797...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allow...

CVE-2026-79217

Incorrect authorization in Mobile in Google Chrome on on iOS prior to...

CVE-2026-79077

Incorrect authorization in WebProtect in Google Chrome prior to 152.0...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrom...

CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows p...

CVE-2026-79259

Improper input validation in Safebrowsing in Google Chrome prior to 15...

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulner...

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/P...

CVE-2026-74706

In the Linux kernel, the following vulnerability has been resolved: b...

CVE-2026-74625

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

CVE-2026-74655

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

CVE-2026-75899

fast-uri is a URI parser for Node.js. It decodes percent escapes in a...

CVE-2026-79239

Out of bounds read in Tint in Google Chrome on on Android prior to 152...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.6...

CVE-2026-74645

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-74665

In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, bpfprogrungenericxdp copies xdpfragssize back to...

CVE-2026-74740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

CVE-2026-80532

In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list pointers based on what it finds on disk and in memory before we move ...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152...

CVE-2026-79213

Incorrect authorization in WebAppInstalls in Google Chrome on on Andro...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android...

CVE-2026-78960

Information leak in Extensions in Google Chrome prior to 152.0.7977.65...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977...

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 15...

CVE-2026-79270

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.6...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.79...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a rem...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977...

CVE-2026-79105

Improper input validation in Mobile in Google Chrome on on iOS prior t...

CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 a...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 al...

CVE-2026-78976

Improper input validation in StorageAccessAPI in Google Chrome prior t...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0...

CVE-2026-79185

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowe...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152...

CVE-2026-78966

Externally controlled reference in QUIC in Google Chrome prior to 152...

CVE-2026-78980

Improper input validation in ReaderMode in Google Chrome prior to 152...

CVE-2026-79177

Incorrect authorization in Media in Google Chrome on on Windows prior...

CVE-2026-79098

UI misrepresentation in PermissionElement in Google Chrome prior to 15...

CVE-2026-74704

In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if the flow is backlogged. The parsing code contains a WARNON1 which can...

CVE-2026-74687

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9wdt: prevent timer rearm during teardown at91ping rearms the watchdog timer from its callback. timerdelete neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver...

CVE-2026-77638

security update...

CVE-2026-74749

In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension exittousermodeloop invokes rseqgranttimesliceextension with interrupts enabled. If the extension is granted it invokes hrtimerrearmdeferredtif to ensure that a pending...