CVE-2026-59739

Information disclosure via SetWatches reconnect replay in Apache ZooKe...

CVE-2026-89835

In the Linux kernel, the following vulnerability has been resolved: f...

CVE-2026-76825

RestrictedPython is a tool that helps define a subset of the Python la...

CVE-2026-89880

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-92627

A heap-use-after-free vulnerability exists in H5Tconvff in src/H...

CVE-2026-89941

In the Linux kernel, the following vulnerability has been resolved: i...

CVE-2026-89790

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in a second pass. Since RTMNEWROUTE is RTNL-free, a concurrent...

CVE-2026-89809

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-79993

The deleteContainer opcode 0x14/20 is processed without verifying...

CVE-2026-90029

In the Linux kernel, the following vulnerability has been resolved: u...

CVE-2026-89825

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-90001

In the Linux kernel, the following vulnerability has been resolved: H...

CVE-2026-89811

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-89916

In the Linux kernel, the following vulnerability has been resolved: K...

CVE-2026-89964

In the Linux kernel, the following vulnerability has been resolved: p...

CVE-2026-89970

In the Linux kernel, the following vulnerability has been resolved: n...

CVE-2026-89803

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-62846

SQUID-2026:9...

CVE-2026-89783

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6inputaddr when secpath is full The depth check in xfrm6inputaddr is off by one: if 1 + sp-len == XFRMMAXDEPTH goto drop; ... sp-xvecsp-len++ = x; xfrminput can leave sp-len == XFRMMAXDEPTH,...

CVE-2026-89867

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89878

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-92091

A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and the length of keyops is not bounded. A remote, unauthenticated attacker can supply a JWK with a large keyops array to an application that...

CVE-2026-89985

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89088

heap buffer overflow in duplicatelegacyrootdir...

CVE-2026-90003

In the Linux kernel, the following vulnerability has been resolved: f...

CVE-2026-89999

In the Linux kernel, the following vulnerability has been resolved: H...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-89973

In the Linux kernel, the following vulnerability has been resolved: n...

CVE-2026-89863

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2026-89865

In the Linux kernel, the following vulnerability has been resolved: s...

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2026-90047

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-91718

Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91725

Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91735

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91711

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-89868

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-90036

In the Linux kernel, the following vulnerability has been resolved: N...

CVE-2026-90042

In the Linux kernel, the following vulnerability has been resolved: c...

CVE-2026-89827

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-91724

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91727

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...