[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 12 20:14:30 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
15ae058f by security tracker role at 2026-10-12T19:14:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,735 @@
+CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
+ TODO: check
+CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically generate RES ...)
+ TODO: check
+CVE-2026-93695 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, File ...)
+ TODO: check
+CVE-2026-93694 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, proc ...)
+ TODO: check
+CVE-2026-93693 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, impr ...)
+ TODO: check
+CVE-2026-92877 (The JAXB factory methods historically relied solely on `FEATURE_SECURE ...)
+ TODO: check
+CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, t ...)
+ TODO: check
+CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3, @authentication ...)
+ TODO: check
+CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to the nam ...)
+ TODO: check
+CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This vulnerability allo ...)
+ TODO: check
+CVE-2026-85976 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85975 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85974 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85973 (Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartex ...)
+ TODO: check
+CVE-2026-85972 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85971 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85970 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85969 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85968 (Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-o ...)
+ TODO: check
+CVE-2026-85967 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85966 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85965 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85964 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85963 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85962 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85961 (On Azure deployments, Progress MarkLogic Server 12.x releases before 1 ...)
+ TODO: check
+CVE-2026-85960 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85959 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85958 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85957 (Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a S ...)
+ TODO: check
+CVE-2026-85956 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85955 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85954 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85953 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85952 (Affected Linux-based Progress MarkLogic Server 12.x releases before 12 ...)
+ TODO: check
+CVE-2026-85951 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85950 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85949 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85948 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85947 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
+ TODO: check
+CVE-2026-85499 (Improper Authorization vulnerability in Apache SkyWalking BanyanDB. ...)
+ TODO: check
+CVE-2026-85471 (A flaw was found in Quay. An authenticated repository administrator co ...)
+ TODO: check
+CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied index t ...)
+ TODO: check
+CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP server within ...)
+ TODO: check
+CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an operator confi ...)
+ TODO: check
+CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ...)
+ TODO: check
+CVE-2026-78404 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5is vulnerable ...)
+ TODO: check
+CVE-2026-77366 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
+ TODO: check
+CVE-2026-77364 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
+ TODO: check
+CVE-2026-77363 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
+ TODO: check
+CVE-2026-75888 (A flaw was found in the OpenShift console. An authenticated console us ...)
+ TODO: check
+CVE-2026-6232 (An out-of-bounds write vulnerability in the SPI host command interface ...)
+ TODO: check
+CVE-2026-68764
+ REJECTED
+CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffe ...)
+ TODO: check
+CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members wp-member ...)
+ TODO: check
+CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
+ TODO: check
+CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
+ TODO: check
+CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
+ TODO: check
+CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
+ TODO: check
+CVE-2026-42689 (Concurrent Execution using Shared Resource with Improper Synchronizati ...)
+ TODO: check
+CVE-2026-1907 (A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open S ...)
+ TODO: check
+CVE-2026-18390 (Improper neutralization of special elements used in an OS command ('OS ...)
+ TODO: check
+CVE-2026-18166 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UN ...)
+ TODO: check
+CVE-2026-12613 (Deserialization of untrusted data vulnerability in Ministry of Justice ...)
+ TODO: check
+CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an application, ...)
+ TODO: check
+CVE-2026-109399 (SWUpdate through 2026.05.1 contains an improper certificate validation ...)
+ TODO: check
+CVE-2026-109398 (Gumlet php-image-resize before 3.0.1 contains a denial of service vuln ...)
+ TODO: check
+CVE-2026-109397 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted fi ...)
+ TODO: check
+CVE-2026-109396 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula inje ...)
+ TODO: check
+CVE-2026-109394 (Thirty bees through 1.7.0 contains an authentication bypass vulnerabil ...)
+ TODO: check
+CVE-2026-109393 (QloApps through 1.7.0 contains an insecure direct object reference vul ...)
+ TODO: check
+CVE-2026-109392 (Pimcore through 2026.3.1 contains a stored cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-109391 (Square Squash through commit e73f280 contains an insecure deserializat ...)
+ TODO: check
+CVE-2026-109390 (AnyDesk before 8.0.3 allows unauthenticated remote attackers to execut ...)
+ TODO: check
+CVE-2026-109374 (ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerabil ...)
+ TODO: check
+CVE-2026-109373 (ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerab ...)
+ TODO: check
+CVE-2026-109372 (ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentic ...)
+ TODO: check
+CVE-2026-109371 (ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerab ...)
+ TODO: check
+CVE-2026-109366 (Zebra before 6.4.0 contains an improper integrity validation vulnerabi ...)
+ TODO: check
+CVE-2026-109365 (Zebra before 6.4.0 contains an uncontrolled resource consumption vulne ...)
+ TODO: check
+CVE-2026-109364 (Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that ...)
+ TODO: check
+CVE-2026-109363 (ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions ...)
+ TODO: check
+CVE-2026-109362 (Heym v0.0.5 before v0.0.113 contains a broken access control vulnerabi ...)
+ TODO: check
+CVE-2026-109361 (MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerab ...)
+ TODO: check
+CVE-2026-109360 (MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerabilit ...)
+ TODO: check
+CVE-2026-109359 (Contrast 1.8.0 before 1.24.1 contains an improper verification vulnera ...)
+ TODO: check
+CVE-2026-109358 (Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect pe ...)
+ TODO: check
+CVE-2026-109357 (LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-autho ...)
+ TODO: check
+CVE-2026-109356 (LibreNMS before 26.9.0 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-109355 (LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerab ...)
+ TODO: check
+CVE-2026-109354 (LibreNMS before 26.9.0 contains a path traversal vulnerability in nfse ...)
+ TODO: check
+CVE-2026-109353 (LibreNMS before 26.9.0 contains an SQL injection vulnerability that al ...)
+ TODO: check
+CVE-2026-109352 (LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerab ...)
+ TODO: check
+CVE-2026-109351 (Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory alloca ...)
+ TODO: check
+CVE-2026-109350 (Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerabi ...)
+ TODO: check
+CVE-2026-109349 (gitoxide gix-pack before 0.75.0 contains a reachable assertion in Byte ...)
+ TODO: check
+CVE-2026-109348 (Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulner ...)
+ TODO: check
+CVE-2026-109347 (Adminer before 6.1.1 contains a remote code execution vulnerability th ...)
+ TODO: check
+CVE-2026-109346 (better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepre ...)
+ TODO: check
+CVE-2026-109345 (DOMPurify before 3.4.16 contains a cross-site scripting vulnerability ...)
+ TODO: check
+CVE-2026-109344 (DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vu ...)
+ TODO: check
+CVE-2026-109343 (SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQ ...)
+ TODO: check
+CVE-2026-109342 (SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vu ...)
+ TODO: check
+CVE-2026-109341 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
+ TODO: check
+CVE-2026-109340 (SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vul ...)
+ TODO: check
+CVE-2026-109339 (SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server me ...)
+ TODO: check
+CVE-2026-109338 (SurrealDB before 3.3.0 contains a denial of service vulnerability that ...)
+ TODO: check
+CVE-2026-109337 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
+ TODO: check
+CVE-2026-109336 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
+ TODO: check
+CVE-2026-109335 (SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure v ...)
+ TODO: check
+CVE-2026-109334 (SurrealDB before 3.3.0 does not check the caller-selected namespace or ...)
+ TODO: check
+CVE-2026-109333 (SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vul ...)
+ TODO: check
+CVE-2026-109332 (Network-AI (npm network-ai) before 5.15.2 contains an origin validatio ...)
+ TODO: check
+CVE-2026-109331 (Network-AI from 5.14.0 before 5.15.2 contains a security control bypas ...)
+ TODO: check
+CVE-2026-109330 (Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacki ...)
+ TODO: check
+CVE-2026-109329 (Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken ...)
+ TODO: check
+CVE-2026-109328 (Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-s ...)
+ TODO: check
+CVE-2026-109327 (Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a refle ...)
+ TODO: check
+CVE-2026-109326 (Grav before 2.1.7 contains an information disclosure vulnerability bec ...)
+ TODO: check
+CVE-2026-109325 (Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulner ...)
+ TODO: check
+CVE-2026-109324 (Grav before 2.1.7 contains a denial of service vulnerability that allo ...)
+ TODO: check
+CVE-2026-109323 (Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization ...)
+ TODO: check
+CVE-2026-109322 (Grav Guestbook plugin before 0.5.2 contains a stored cross-site script ...)
+ TODO: check
+CVE-2026-109321 (Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisi ...)
+ TODO: check
+CVE-2026-109320 (The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improp ...)
+ TODO: check
+CVE-2026-109319 (Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization a ...)
+ TODO: check
+CVE-2026-109318 (Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulner ...)
+ TODO: check
+CVE-2026-109317 (Grav grav-plugin-api before 1.0.36 contains a privilege escalation vul ...)
+ TODO: check
+CVE-2026-109316 (Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing author ...)
+ TODO: check
+CVE-2026-109315 (Grav from 2.0.22 before 2.1.7 contains an information disclosure vulne ...)
+ TODO: check
+CVE-2026-109314 (Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosur ...)
+ TODO: check
+CVE-2026-109313 (Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass ...)
+ TODO: check
+CVE-2026-109312 (Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass ...)
+ TODO: check
+CVE-2026-109311 (vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() ...)
+ TODO: check
+CVE-2026-109310 (SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template func ...)
+ TODO: check
+CVE-2026-109309 (SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulner ...)
+ TODO: check
+CVE-2026-109308 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw ...)
+ TODO: check
+CVE-2026-109307 (Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripti ...)
+ TODO: check
+CVE-2026-109306 (Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization v ...)
+ TODO: check
+CVE-2026-109305 (Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass th ...)
+ TODO: check
+CVE-2026-109304 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arb ...)
+ TODO: check
+CVE-2026-109303 (Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not e ...)
+ TODO: check
+CVE-2026-109302 (Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 appl ...)
+ TODO: check
+CVE-2026-109301 (Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not re ...)
+ TODO: check
+CVE-2026-109300 (Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scri ...)
+ TODO: check
+CVE-2026-109299 (Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulne ...)
+ TODO: check
+CVE-2026-109298 (Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for ...)
+ TODO: check
+CVE-2026-109297 (Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerabi ...)
+ TODO: check
+CVE-2026-109296 (Open WebUI before 0.11.4 contains a missing authorization vulnerabilit ...)
+ TODO: check
+CVE-2026-109295 (Open WebUI from 0.11.0 before 0.11.4 contains a regular expression den ...)
+ TODO: check
+CVE-2026-109294 (Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource ...)
+ TODO: check
+CVE-2026-109293 (Open WebUI from 0.11.0 before 0.11.4 contains an information disclosur ...)
+ TODO: check
+CVE-2026-109292 (Open WebUI from 0.6.27 before 0.11.4 contains an information disclosur ...)
+ TODO: check
+CVE-2026-109291 (Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting v ...)
+ TODO: check
+CVE-2026-109290 (Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scri ...)
+ TODO: check
+CVE-2026-109289 (Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization ...)
+ TODO: check
+CVE-2026-109288 (Open WebUI before 0.11.4 contains a stored cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-109287 (Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw whe ...)
+ TODO: check
+CVE-2026-109286 (Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message ha ...)
+ TODO: check
+CVE-2026-109285 (Open WebUI from 0.6.0 before 0.11.4 contains an improper access contro ...)
+ TODO: check
+CVE-2026-109284 (Open WebUI from 0.11.0 before 0.11.4 contains an improper authorizatio ...)
+ TODO: check
+CVE-2026-109283 (Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass ...)
+ TODO: check
+CVE-2026-109282 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type c ...)
+ TODO: check
+CVE-2026-109281 (ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read ...)
+ TODO: check
+CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnera ...)
+ TODO: check
+CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper sync ...)
+ TODO: check
+CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
+ TODO: check
+CVE-2026-109277 (ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in ...)
+ TODO: check
+CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incom ...)
+ TODO: check
+CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code i ...)
+ TODO: check
+CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symli ...)
+ TODO: check
+CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an infor ...)
+ TODO: check
+CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereferen ...)
+ TODO: check
+CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnera ...)
+ TODO: check
+CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak vulnerability in th ...)
+ TODO: check
+CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an infor ...)
+ TODO: check
+CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use af ...)
+ TODO: check
+CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack ...)
+ TODO: check
+CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML i ...)
+ TODO: check
+CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read v ...)
+ TODO: check
+CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontro ...)
+ TODO: check
+CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
+ TODO: check
+CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
+ TODO: check
+CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
+ TODO: check
+CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
+ TODO: check
+CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an unini ...)
+ TODO: check
+CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free v ...)
+ TODO: check
+CVE-2026-109257 (FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_cont ...)
+ TODO: check
+CVE-2026-109256 (FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the W ...)
+ TODO: check
+CVE-2026-109255 (FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerabili ...)
+ TODO: check
+CVE-2026-109254 (FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in ...)
+ TODO: check
+CVE-2026-109253 (FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulner ...)
+ TODO: check
+CVE-2026-109252 (FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference v ...)
+ TODO: check
+CVE-2026-109251 (FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geom ...)
+ TODO: check
+CVE-2026-109250 (FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerabil ...)
+ TODO: check
+CVE-2026-109249 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in free ...)
+ TODO: check
+CVE-2026-109248 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the ...)
+ TODO: check
+CVE-2026-109247 (FreeRDP before 3.32.0 contains a path traversal vulnerability in conve ...)
+ TODO: check
+CVE-2026-109246 (FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the f ...)
+ TODO: check
+CVE-2026-109245 (FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validatio ...)
+ TODO: check
+CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulne ...)
+ TODO: check
+CVE-2026-109243 (FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assi ...)
+ TODO: check
+CVE-2026-109242 (FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized hea ...)
+ TODO: check
+CVE-2026-109241 (FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerabilit ...)
+ TODO: check
+CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerabil ...)
+ TODO: check
+CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request forgery vul ...)
+ TODO: check
+CVE-2026-109238 (Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vul ...)
+ TODO: check
+CVE-2026-109237 (Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate byp ...)
+ TODO: check
+CVE-2026-109229 (SGLang through 0.5.21 contains a denial of service vulnerability that ...)
+ TODO: check
+CVE-2026-109228 (SGLang through 0.5.21 contains a resource budget bypass vulnerability ...)
+ TODO: check
+CVE-2026-109227 (SGLang through 0.5.21 contains an unbounded memory allocation vulnerab ...)
+ TODO: check
+CVE-2026-109226 (SGLang through 0.5.21 contains a decompression amplification vulnerabi ...)
+ TODO: check
+CVE-2026-109225 (SGLang through 0.5.21 contains an unbounded memory allocation vulnerab ...)
+ TODO: check
+CVE-2026-109222
+ REJECTED
+CVE-2026-109206 (LogicalDOC Community Edition through 9.3 contains a username enumerati ...)
+ TODO: check
+CVE-2026-109205 (LogicalDOC Community Edition through 9.3 contains an unauthenticated f ...)
+ TODO: check
+CVE-2026-109204 (LogicalDOC Community Edition through 9.3 contains an improper authoriz ...)
+ TODO: check
+CVE-2026-109203 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
+ TODO: check
+CVE-2026-109202 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
+ TODO: check
+CVE-2026-109201 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
+ TODO: check
+CVE-2026-109200 (LogicalDOC Community Edition through 9.3 contains a server-side reques ...)
+ TODO: check
+CVE-2026-109199 (LogicalDOC Community Edition through 9.3 contains a code injection vul ...)
+ TODO: check
+CVE-2026-109195 (A flaw was found in Quay. An authenticated attacker can access reposit ...)
+ TODO: check
+CVE-2026-109194 (A flaw was found in Red Hat Quay. The build trigger management applica ...)
+ TODO: check
+CVE-2026-109188 (jshERP through 3.6 contains a missing authorization vulnerability that ...)
+ TODO: check
+CVE-2026-109187 (jshERP through 3.6 contains an information disclosure vulnerability th ...)
+ TODO: check
+CVE-2026-109186 (jshERP through 3.6 contains a mass assignment vulnerability in the Use ...)
+ TODO: check
+CVE-2026-109185 (jshERP through 3.6 contains a missing authorization vulnerability in t ...)
+ TODO: check
+CVE-2026-109184 (jshERP through 3.6 contains an improper authorization vulnerability th ...)
+ TODO: check
+CVE-2026-109183 (jshERP through 3.6 contains an authorization bypass vulnerability that ...)
+ TODO: check
+CVE-2026-109182 (jshERP through 3.6 contains an incorrect authorization vulnerability i ...)
+ TODO: check
+CVE-2026-109181 (jshERP through 3.6 contains an authorization bypass vulnerability that ...)
+ TODO: check
+CVE-2026-109180 (jshERP through 3.6 contains an authorization bypass vulnerability that ...)
+ TODO: check
+CVE-2026-109179 (jshERP through 3.6 contains a missing authorization vulnerability in L ...)
+ TODO: check
+CVE-2026-109178 (jshERP through 3.6 contains a missing authorization vulnerability in L ...)
+ TODO: check
+CVE-2026-109177 (MoguBlog through 6.2 contains a broken access control vulnerability th ...)
+ TODO: check
+CVE-2026-109176 (MoguBlog through 6.2 contains an insecure direct object reference vuln ...)
+ TODO: check
+CVE-2026-109175 (MoguBlog through 6.2 contains an insecure direct object reference vuln ...)
+ TODO: check
+CVE-2026-109174 (MoguBlog through 6.2 contains an information disclosure vulnerability ...)
+ TODO: check
+CVE-2026-109173 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-109172 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-109171 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-109170 (LogicalDOC Community Edition through 9.3 contains an HQL injection vul ...)
+ TODO: check
+CVE-2026-109169 (LogicalDOC Community Edition through 9.3 contains a sql injection vuln ...)
+ TODO: check
+CVE-2026-109168 (lamp-cloud through 5.10.1 contains an insecure direct object reference ...)
+ TODO: check
+CVE-2026-109167 (TDuck survey form through 6.0 contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-109166 (lamp-cloud through 5.10.1 contains an insecure direct object reference ...)
+ TODO: check
+CVE-2026-109165 (TDuck survey form through 6.0 contains a broken access control vulnera ...)
+ TODO: check
+CVE-2026-109164 (TDuck survey form through 6.0 contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-108979
+ REJECTED
+CVE-2026-108953 (mac-shell-mcp before 2.0.0 contains an OS command injection vulnerabil ...)
+ TODO: check
+CVE-2026-108952 (RT-Thread through 5.3.0 contains a memory corruption vulnerability in ...)
+ TODO: check
+CVE-2026-108951 (LavaLite CMS through 10.1.2 contains an authorization bypass vulnerabi ...)
+ TODO: check
+CVE-2026-108950 (Open Source Social Network (OSSN) through 10.1 contains a missing auth ...)
+ TODO: check
+CVE-2026-108922 (A flaw has been found in KusalkaSilva Learning-Management-System up to ...)
+ TODO: check
+CVE-2026-108921 (A vulnerability was detected in KusalkaSilva Learning-Management-Syste ...)
+ TODO: check
+CVE-2026-108920 (A security vulnerability has been detected in SourceCodester Drug Reco ...)
+ TODO: check
+CVE-2026-108919 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
+ TODO: check
+CVE-2026-108918 (A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is a ...)
+ TODO: check
+CVE-2026-108917 (A vulnerability was determined in Edimax BR-6208AC 1.32. This issue af ...)
+ TODO: check
+CVE-2026-108916 (A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability ...)
+ TODO: check
+CVE-2026-108915 (A vulnerability has been found in Edimax BR-6208AC 1.32. This affects ...)
+ TODO: check
+CVE-2026-108914 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue ...)
+ TODO: check
+CVE-2026-108909 (A security flaw has been discovered in Netcore NR268 1.7.121109. Affec ...)
+ TODO: check
+CVE-2026-108908 (A vulnerability was identified in Netcore NR268 1.7.121109. Affected b ...)
+ TODO: check
+CVE-2026-108907 (A vulnerability was determined in Netcore NR268 1.7.121109. Affected i ...)
+ TODO: check
+CVE-2026-108906 (A vulnerability has been found in Netcore NR268 1.7.121109. This affec ...)
+ TODO: check
+CVE-2026-108901 (A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31 ...)
+ TODO: check
+CVE-2026-108900 (A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affe ...)
+ TODO: check
+CVE-2026-108899 (A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the ...)
+ TODO: check
+CVE-2026-108898 (A vulnerability was detected in Netis WF2409E 3.3.42541. This affects ...)
+ TODO: check
+CVE-2026-108897 (A security vulnerability has been detected in Smart Media4U Technology ...)
+ TODO: check
+CVE-2026-108896 (A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects t ...)
+ TODO: check
+CVE-2026-108895 (A weakness has been identified in Linksys E1700 1.0.0.4.003. The affec ...)
+ TODO: check
+CVE-2026-108894 (A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impa ...)
+ TODO: check
+CVE-2026-108893 (A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. Thi ...)
+ TODO: check
+CVE-2026-108892 (A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vuln ...)
+ TODO: check
+CVE-2026-108890 (A vulnerability has been found in BlackBeltTechnology pi-agent-dashboa ...)
+ TODO: check
+CVE-2026-108889 (A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affec ...)
+ TODO: check
+CVE-2026-108836 (A vulnerability has been found in Ollama up to 0.34.1. The affected el ...)
+ TODO: check
+CVE-2026-108835 (A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1 ...)
+ TODO: check
+CVE-2026-108834 (A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This ...)
+ TODO: check
+CVE-2026-108831 (A security vulnerability has been detected in meetecho janus-gateway u ...)
+ TODO: check
+CVE-2026-108830 (A weakness has been identified in meetecho janus-gateway up to 1.4.2. ...)
+ TODO: check
+CVE-2026-108829 (A security flaw has been discovered in Zen Cart up to 2.2.2. Affected ...)
+ TODO: check
+CVE-2026-108828 (A vulnerability was identified in Zen Cart 2.2.2. Affected by this vul ...)
+ TODO: check
+CVE-2026-108827 (A vulnerability was determined in Zen Cart up to 2.2.2. Affected is th ...)
+ TODO: check
+CVE-2026-108826 (A vulnerability was found in Zen Cart up to 2.2.2. This impacts the fu ...)
+ TODO: check
+CVE-2026-108825 (A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. Thi ...)
+ TODO: check
+CVE-2026-108824 (A flaw has been found in DataEase up to 3.0.0. The impacted element is ...)
+ TODO: check
+CVE-2026-108822 (A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affect ...)
+ TODO: check
+CVE-2026-108821 (A security vulnerability has been detected in Tencent WeKnora up to 0. ...)
+ TODO: check
+CVE-2026-108820 (A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. Thi ...)
+ TODO: check
+CVE-2026-108819 (A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1 ...)
+ TODO: check
+CVE-2026-108818 (A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. Thi ...)
+ TODO: check
+CVE-2026-108817 (A vulnerability was determined in agno-agi agno up to 3.0.9. Affected ...)
+ TODO: check
+CVE-2026-108816 (A vulnerability was found in agno-agi agno up to 3.0.6. Affected by th ...)
+ TODO: check
+CVE-2026-108815 (A vulnerability has been found in idcCMS 1.70. Affected is an unknown ...)
+ TODO: check
+CVE-2026-108814 (A flaw has been found in SEMCMS up to 5.0. This impacts an unknown fun ...)
+ TODO: check
+CVE-2026-108813 (A vulnerability was detected in SEMCMS up to 5.0. This affects an unkn ...)
+ TODO: check
+CVE-2026-108812 (A security vulnerability has been detected in SEMCMS up to 5.0. The im ...)
+ TODO: check
+CVE-2026-108811 (A weakness has been identified in WMCMS 4.446.1257. The affected eleme ...)
+ TODO: check
+CVE-2026-108810 (A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5 ...)
+ TODO: check
+CVE-2026-108486 (Missing Authorization vulnerability in WPMU DEV Forminator forminator ...)
+ TODO: check
+CVE-2026-108482 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108481 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon Wor ...)
+ TODO: check
+CVE-2026-108479 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon Wor ...)
+ TODO: check
+CVE-2026-108478 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108477 (Missing Authorization vulnerability in Arraytics Booktics booktics all ...)
+ TODO: check
+CVE-2026-108476 (Missing Authorization vulnerability in VideoWhisper.com Paid Videochat ...)
+ TODO: check
+CVE-2026-108475 (Missing Authorization vulnerability in VideoWhisper.com Broadcast Live ...)
+ TODO: check
+CVE-2026-108168 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108094 (A use-after-free flaw was found in mutter in the Wayland color-managem ...)
+ TODO: check
+CVE-2026-107869 (Missing Authorization vulnerability in WP Desk Flexible Subscriptions ...)
+ TODO: check
+CVE-2026-107866 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-107865 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-107864 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-107863 (Missing Authorization vulnerability in Codection Products Restricted U ...)
+ TODO: check
+CVE-2026-107862 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-107432 (Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Eve ...)
+ TODO: check
+CVE-2026-107430 (Missing Authorization vulnerability in VideoWhisper.com VideoWhisper S ...)
+ TODO: check
+CVE-2026-107429 (Improper Validation of Specified Quantity in Input vulnerability in Vi ...)
+ TODO: check
+CVE-2026-107427 (Authorization Bypass Through User-Controlled Key vulnerability in NOUS ...)
+ TODO: check
+CVE-2026-107423 (Missing Authorization vulnerability in WP User Manager WP User Manager ...)
+ TODO: check
+CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics booktics all ...)
+ TODO: check
+CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a server\u2 ...)
+ TODO: check
+CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
+ TODO: check
+CVE-2026-106605 (Improper Validation of Specified Quantity in Input vulnerability in WP ...)
+ TODO: check
+CVE-2026-105668 (Protection Mechanism Failure vulnerability in hexpm hex allows the own ...)
+ TODO: check
+CVE-2026-105466 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable ...)
+ TODO: check
+CVE-2026-105465 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 isvulnerable ...)
+ TODO: check
+CVE-2026-105464 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UN ...)
+ TODO: check
+CVE-2026-105412 (An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17. ...)
+ TODO: check
+CVE-2026-105411 (An Authorization Bypass Through User-Controlled Key vulnerability affe ...)
+ TODO: check
+CVE-2026-105410 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
+ TODO: check
+CVE-2026-105409 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
+ TODO: check
+CVE-2026-105408 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
+ TODO: check
+CVE-2026-105407 (An OS Command Injection vulnerability affecting Tuleap Enterprise Edit ...)
+ TODO: check
+CVE-2026-105283 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
+ TODO: check
+CVE-2026-105280 (Improper Validation of Integrity Check Value vulnerability in hexpm he ...)
+ TODO: check
+CVE-2026-105274 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
+ TODO: check
+CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly ...)
+ TODO: check
+CVE-2026-104710
+ REJECTED
+CVE-2026-104355 (A connected peer cluster can modify a Temporal Server cluster's local ...)
+ TODO: check
+CVE-2026-104102 (copyparty is a portable file server. Prior to 1.20.19, FTP upload path ...)
+ TODO: check
+CVE-2026-103903 (An incorrect authorization vulnerability in the WinBox authentication ...)
+ TODO: check
+CVE-2026-103902 (Improper verification of cryptographic signature vulnerability in Digi ...)
+ TODO: check
+CVE-2026-103537 (Thelia 2.6.1 contains an absolute path traversal vulnerability in its ...)
+ TODO: check
+CVE-2026-103535 (Thelia v2.6.1 contains path traversal and PHP code injection vulnerabi ...)
+ TODO: check
+CVE-2026-103529 (Thelia v2.6.0 permits authenticated administrators to upload and insta ...)
+ TODO: check
+CVE-2026-103528 (Thelia 2.6.0 uses Smarty for email templates without properly restrict ...)
+ TODO: check
+CVE-2026-103527 (Thelia v2.6.0's Smarty templates (address.html and address-update.html ...)
+ TODO: check
+CVE-2026-103526 (In Thelia v2.6.0, both the administrative login and forgotten password ...)
+ TODO: check
+CVE-2026-103524 (Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities wit ...)
+ TODO: check
+CVE-2026-103523 (Thelia v2.6.0 contains an open redirect vulnerability in its address c ...)
+ TODO: check
+CVE-2026-103522 (In Thelia v2.6.0, the store banner upload feature performs insufficien ...)
+ TODO: check
+CVE-2026-103521 (In Thelia v2.6.0, the document upload endpoint properly blocks the upl ...)
+ TODO: check
+CVE-2026-103503 (Improper Certificate Validation vulnerability in hexpm hex allows an a ...)
+ TODO: check
+CVE-2026-103502 (Improper Certificate Validation vulnerability in hexpm hex_core allows ...)
+ TODO: check
+CVE-2026-103356 (Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshippi ...)
+ TODO: check
+CVE-2026-103080 (External Control of Assumed-Immutable Web Parameter vulnerability in V ...)
+ TODO: check
+CVE-2026-103061 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-103060 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-102663 (OpenList is a file list program that supports multiple storage backend ...)
+ TODO: check
CVE-2026-XXXX [GHSA-4g67-jhpc-q5xp]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
@@ -5144,7 +5876,7 @@ CVE-2026-97308 (Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 v
NOT-FOR-US: WordPress plugin or theme
CVE-2026-96890 (A Server-Side Request Forgery (SSRF) vulnerability was identified in G ...)
NOT-FOR-US: Github Enterprise Server
-CVE-2026-95594 (Unauthenticated Privilege Escalation in SMS Alert Order Notifications ...)
+CVE-2026-95594 (Incorrect Privilege Assignment vulnerability in Cozy Vision Technologi ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95526 (Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -5476,504 +6208,750 @@ CVE-2026-106440 (Hydra is a framework for elegantly configuring complex applicat
CVE-2026-106439 (Hydra is a framework for elegantly configuring complex applications. F ...)
NOT-FOR-US: Hydra (different from src:hydra)
CVE-2026-106427 (Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106426 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106425 (Missing authorization in BrowserTag in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106424 (Information leak in Audio in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106423 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106422 (Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106421 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106420 (Incorrect calculation in API in Google Chrome on on Windows prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106419 (Use after free in ANGLE in Google Chrome on on Android prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106418 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106417 (Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106416 (Code injection in Extensions in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106415 (Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106414 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106413 (Race condition in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106412 (Race condition in Core in Google Chrome on on Mac prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106411 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106410 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106409 (Incorrect reference resolution in WebAppInstalls in Google Chrome on o ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106408 (Protection mechanism failure in Mobile in Google Chrome on on iOS prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106407 (Incorrect authorization in GetUserMedia in Google Chrome prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106406 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106405 (Race condition in CustomTabs in Google Chrome on on Android prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106404 (Incorrect authorization in FontAccess in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106403 (Incorrect authorization in Accessibility in Google Chrome prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106402 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106401 (Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106400 (Clickjacking in Messages in Google Chrome on on Android prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106396 (Improper input validation in Omnibox in Google Chrome on on Android pr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106395 (Uninitialized resource in Dawn in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106394 (Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106393 (Use after free in Storage in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106392 (Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106391 (Incorrect authorization in WebShare in Google Chrome on on Android pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106390 (Incorrect provision of specified functionality in SanitizerAPI in Goog ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106389 (Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106388 (Missing authorization in DataTransfer in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106387 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106386 (Uninitialized resource in WebAudio in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106385 (Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106384 (Missing authorization in SiteIsolation in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106383 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106382 (Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106381 (Incorrect authorization in Passwords in Google Chrome on on iOS prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106380 (UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106376 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106375 (Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106374 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106373 (Use after free in Fonts in Google Chrome on on Windows prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106372 (Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106371 (Incorrect authorization in Transactions Platform in Google Chrome on o ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106370 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106369 (Missing authorization in Translate in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106368 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106367 (Missing authorization in Mobile in Google Chrome on on Android prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106366 (Incomplete cleanup in CustomTabs in Google Chrome on on Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106365 (Missing authorization in Animation in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106364 (Incorrect authorization in Omnibox in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106363 (Missing authorization in FullScreen in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106362 (Missing authorization in DevTools in Google Chrome prior to 155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106361 (Incorrect provision of specified functionality in Mobile in Google Chr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106360 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106359 (Confused deputy in DeviceBoundSessionCredentials in Google Chrome prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106358 (Use after free in Navigation in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106357 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106356 (Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106355 (Missing authorization in Media in Google Chrome on on Windows prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106354 (Improper resource exposure in Extensions in Google Chrome prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106353 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106352 (Incorrect authorization in WebProtect in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106351 (Observable discrepancy in Safebrowsing in Google Chrome on on iOS prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106350 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106349 (Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106348 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106347 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106346 (Improper state validation in DevTools in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106345 (Use of released resource in Session in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106344 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106343 (Improper state validation in Autofill AI in Google Chrome on on Androi ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106342 (Information leak in Autofill in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106341 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106340 (Missing authorization in CredentialProvider in Google Chrome on on Win ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106339 (Use of released resource in Core in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106338 (UI misrepresentation in PictureInPicture in Google Chrome on on Androi ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106337 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106336 (Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106335 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106334 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106333 (Incorrect authorization in Input in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106332 (Integer overflow in Compositing in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106331 (Improper input validation in Extensions in Google Chrome prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106330 (Information leak in Paint in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106329 (Incorrect authorization in FileSystem in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106328 (Incorrect authorization in PDF in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106327 (Incorrect authorization in Core in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106326 (Confused deputy in UI in Google Chrome on on Android prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106325 (Incorrect reference resolution in Core in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106324 (Incorrect authorization in WebAppInstalls in Google Chrome on on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106323 (Missing authorization in Chrome for iOS in Google Chrome on on iOS pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106322 (Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106321 (Information leak in Editing in Google Chrome prior to 155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106320 (Use of released resource in UI in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106318 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106317 (UI misrepresentation in FullScreen in Google Chrome on on Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106316 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106315 (Use after free in Modularization in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106314 (Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106313 (Incorrect authorization in Browser in Google Chrome on on Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106312 (Missing authorization in SignIn in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106311 (Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106310 (Use of released resource in FontAccess in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106309 (Incorrect authorization in Selection in Google Chrome on on iOS prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106308 (Incorrect reference resolution in Autofill in Google Chrome on on Andr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106307 (Incorrect authorization in Network in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106306 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106305 (UI misrepresentation in Mobile in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106304 (Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106303 (Observable discrepancy in Autofill AI in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106302 (UI misrepresentation in PermissionElement in Google Chrome prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106301 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106300 (Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106299 (Improper input validation in WebAudio in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106298 (Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106297 (Incorrect authorization in Scheduling in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106296 (Improper privilege management in UI in Google Chrome on on Mac prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106295 (Incorrect authorization in Unbounded Element in Google Chrome prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106294 (Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106293 (Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106292 (Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106291 (Use after free in GarbageCollection in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106290 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106289 (Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106288 (Missing authorization in Browser in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106287 (Information loss in CORS in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106286 (Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106285 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106284 (Out of bounds read in Printing in Google Chrome on on Windows prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106283 (Use after free in Streaming in Google Chrome prior to 155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106282 (UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106281 (Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106280 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106279 (Incorrect reference resolution in Passwords in Google Chrome on on iOS ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106278 (Use after free in Select in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106277 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106276 (UI misrepresentation in Payments in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106275 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106274 (Incorrect reference resolution in Browser in Google Chrome on on Mac p ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106273 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106272 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106271 (Missing authorization in Workers in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106270 (Incorrect authorization in WebAppInstalls in Google Chrome prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106269 (Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106268 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106267 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106266 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106265 (UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106264 (Missing authorization in Web Authentication (Passkeys & Security Keys) ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106263 (Improper input validation in SignIn in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106262 (Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106261 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106260 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106259 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106258 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106257 (Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106256 (Information leak in Passwords in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106255 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106254 (Information leak in Mobile in Google Chrome on on Android prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106253 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106252 (Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106251 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106250 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106249 (Incorrect authorization in Autofill in Google Chrome on on Android pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106248 (Use after free in Bindings in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106247 (Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106246 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106245 (Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106244 (Incorrect authorization in Permissions in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106243 (Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106242 (Information leak in Omnibox in Google Chrome on on Android prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106241 (Incorrect authorization in Search in Google Chrome on on Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106240 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106239 (Integer overflow in WebGL in Google Chrome on on Android prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106238 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106237 (Information leak in Permissions in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106236 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106235 (Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106234 (Use after free in Network in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106233 (Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106232 (UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106231 (Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106230 (Incorrect reference resolution in Offline in Google Chrome on on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106229 (UI misrepresentation in FileSystem in Google Chrome prior to 155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106228 (Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106227 (Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106226 (Improper input validation in Compositing in Google Chrome prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106225 (Missing authorization in Autofill in Google Chrome prior to 155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106224 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106223 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106222 (Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106221 (Confused deputy in WebAPKs in Google Chrome on on Android prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106220 (Information leak in Passwords in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106219 (In JetBrains TeamCity before 2026.2.1 missing validation of Git submod ...)
NOT-FOR-US: JetBrains
CVE-2026-106218 (In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox esc ...)
NOT-FOR-US: JetBrains
CVE-2026-106217 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106216 (Cross-site request forgery in ReadingList in Google Chrome on on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106215 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106214 (Information leak in Proxy in Google Chrome on on Windows prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106213 (Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106212 (Incorrect authorization in Autofill in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106211 (Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106210 (Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106209 (UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106208 (Missing authorization in API in Google Chrome prior to 155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106207 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106206 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106205 (Missing authorization in Passwords in Google Chrome on on Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106204 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106203 (Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106202 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106201 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106200 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106199 (Incorrect authorization in Actor in Google Chrome on on Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106198 (Missing authorization in FileSystem in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106197 (Use after free in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106196 (Missing authorization in Navigation in Google Chrome on on iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106195 (Incorrect authorization in Chromoting in Google Chrome on on Mac prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106194 (Missing authorization in WebAppInstalls in Google Chrome prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106193 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106192 (Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106191 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106190 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106189 (Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106188 (Confused deputy in SignIn in Google Chrome on on Android prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106187 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106186 (Uncontrolled search path element in CredentialProvider in Google Chrom ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106185 (Improper input validation in Viz in Google Chrome prior to 155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106184 (Uninitialized resource in Media in Google Chrome prior to 155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106183 (Missing authorization in Chromoting in Google Chrome on on Windows pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106182 (UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106181 (Incorrect reference resolution in DevTools in Google Chrome prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106180 (Observable discrepancy in Animation in Google Chrome prior to 155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106179 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106123 (The RabbitMQ Java client library allows Java and JVM-based application ...)
- rabbitmq-java-client <unfixed> (bug #1150244)
@@ -6204,7 +7182,7 @@ CVE-2026-105070 (Unauthenticated Privilege Escalation in Salon booking system <=
NOT-FOR-US: WordPress plugin or theme
CVE-2026-105061 (Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 v ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-105059 (Subscriber Broken Access Control in Delete All Comments of wordpress < ...)
+CVE-2026-105059 (Missing Authorization vulnerability in royalnavneet Delete All Comment ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-105058 (Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -6259,6 +7237,7 @@ CVE-2026-102915 (Subscriber Broken Access Control in WPO365 <= 44.1 versions.)
CVE-2026-102387 (Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 v ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-102322 (Incorrect Authorization in SiteIsolation in Google Chrome prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-101207 (Dell OpenManage Integration with Microsoft Windows Admin Center, versi ...)
NOT-FOR-US: Dell / EMC
@@ -9269,28 +10248,39 @@ CVE-2026-103762 (SiYuan before v3.8.5 contains a missing authorization vulnerabi
CVE-2026-103648 (Path traversal in image-downloader 4.3.0 allows an attacker who can co ...)
NOT-FOR-US: image-downloader
CVE-2026-103631 (Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103627 (Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103626 (Incorrect authorization in FileSystem in Google Chrome on on Windows p ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103625 (Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103624 (Use after free in Contextual Tasks in Google Chrome on on Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103623 (Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103622 (Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103621 (Integer overflow in Compositing in Google Chrome prior to 154.0.8037.9 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103604 (Inefficient algorithmic complexity in X.509 distinguished name string ...)
NOT-FOR-US: Bouncycastle components not packaged in Debian
@@ -51094,7 +52084,7 @@ CVE-2026-82223 (Unauthenticated Broken Access Control in WP Event SOlution <= 4.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81775 (Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 version ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-81774 (Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachm ...)
+CVE-2026-81774 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81772 (Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles ...)
NOT-FOR-US: WordPress plugin or theme
@@ -79377,7 +80367,7 @@ CVE-2026-63134 (Malcolm is a network traffic analysis tool suite. Prior to versi
CVE-2026-63133 (Malcolm is a network traffic analysis tool suite. Prior to version 26. ...)
NOT-FOR-US: Malcolm
CVE-2026-5917 (libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the li ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.7+ds-1 (bug #1144465)
NOTE: Fixed by: https://github.com/libgit2/libgit2/commit/b2105b8e60798cb28086d4c648b1cb4854eadccb (v1.9.7)
CVE-2026-55676 (Malcolm is a network traffic analysis tool suite. The file-upload comp ...)
@@ -91015,17 +92005,17 @@ CVE-2026-53587 (libgit2 is a portable C implementation of the Git core methods p
NOTE: https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm
NOTE: Fixed by: https://github.com/libgit2/libgit2/commit/affda60c10fcef16723451c0d7dc71b71dc20ad3 (v1.9.5)
CVE-2026-53586 (libgit2 is a portable C implementation of the Git core methods provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE: https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x
NOTE: Fixed by: https://github.com/libgit2/libgit2/commit/af2b29ad0a74d5bac9751376879ddaf848136d3b (v1.9.5)
CVE-2026-53585 (libgit2 is a portable C implementation of the Git core methods provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE: https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j
NOTE: Fixed by: https://github.com/libgit2/libgit2/commit/0cdfdd5fa8f8514c82413025e1e0808866cf7c30 (v1.9.5)
CVE-2026-53584 (libgit2 is a portable C implementation of the Git core methods provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE: https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm
NOTE: Fixed by: https://github.com/libgit2/libgit2/commit/ec7371da9f359cd8293e9108e7a0b1c1b61b67c4 (v1.9.5)
@@ -117005,7 +117995,7 @@ CVE-2026-27414 (Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27412 (Unauthenticated Local File Inclusion in Pearl - Corporate Business <= ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-27408 (Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 ...)
+CVE-2026-27408 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27404 (Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -134833,7 +135823,7 @@ CVE-2026-11526 (GD versions before 2.86 for Perl allow OS command injection and
- libgd-perl 2.84-3
NOTE: https://lists.security.metacpan.org/cve-announce/msg/41004664/
NOTE: Fixed by: https://github.com/lstein/Perl-GD/commit/67b163713c6c78dfeb693da0978ae934e5cd8210 (v2.86)
-CVE-2026-52903
+CVE-2026-52903 (A deserialization of untrusted data vulnerability was found in ManageI ...)
NOT-FOR-US: ManageIQ
CVE-2026-11791 (A flaw was found in 389 Directory Server. During schema reload, the at ...)
- 389-ds-base <unfixed> (bug #1139816)
@@ -215895,7 +216885,7 @@ CVE-2021-47798 (NoteBurner 2.35 contains a buffer overflow vulnerability in the
NOT-FOR-US: NoteBurner
CVE-2021-47797 (Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability ...)
NOT-FOR-US: Leawo Prof. Media
-CVE-2021-47796 (Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credentia ...)
+CVE-2021-47796 (Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port ...)
NOT-FOR-US: Denver SHC-150 Smart Wifi Camera
CVE-2021-47795 (GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities includi ...)
NOT-FOR-US: GeoVision
@@ -500996,8 +501986,8 @@ CVE-2023-25998 (Improper Control of Filename for Include/Require Statement in PH
NOT-FOR-US: WordPress plugin or theme
CVE-2023-25997 (Missing Authorization vulnerability in SolaPlugins Sola Support Ticket ...)
NOT-FOR-US: WordPress plugin
-CVE-2023-25996
- RESERVED
+CVE-2023-25996 (Insertion of Sensitive Information Into Sent Data vulnerability in Plu ...)
+ TODO: check
CVE-2023-25995 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25994 (Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publis ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ae058f0e95a49fd940c1116861b9352c24a436
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ae058f0e95a49fd940c1116861b9352c24a436
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/3a0f961f/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list