[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 13 20:15:07 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fa7f41e9 by security tracker role at 2026-10-13T19:14:55+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,383 +1,1271 @@
-CVE-2026-109783
+CVE-2026-9218 (Insufficient input validation vulnerability in time server (NTP) setti ...)
+ TODO: check
+CVE-2026-97334 (The network messaging layer contained improper handling of highly comp ...)
+ TODO: check
+CVE-2026-97333 (QAPI contained a stack-based buffer overflow affecting service availab ...)
+ TODO: check
+CVE-2026-96535 (Cross-Site Scripting on the YouMind portal, specifically in the avatar ...)
+ TODO: check
+CVE-2026-96299 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
+ TODO: check
+CVE-2026-96297 (Use of freed memory in the aggregation feature of MongoDB Server can c ...)
+ TODO: check
+CVE-2026-95680 (IBM WebSphere Application Server 8.5, and 9.0 could allow an authentic ...)
+ TODO: check
+CVE-2026-95631 (Adobe Commerce is affected by an Improper Input Validation vulnerabili ...)
+ TODO: check
+CVE-2026-95630 (Adobe Commerce is affected by an Improper Input Validation vulnerabili ...)
+ TODO: check
+CVE-2026-95502 (A Git server that Grafana's Git Sync (provisioning) is configured to u ...)
+ TODO: check
+CVE-2026-95127 (An issue in libass v.0.17.5 allows a remote attacker to cause a denial ...)
+ TODO: check
+CVE-2026-95124 (Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows ...)
+ TODO: check
+CVE-2026-95122 (mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4Fi ...)
+ TODO: check
+CVE-2026-95121 (An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code v ...)
+ TODO: check
+CVE-2026-95117 (Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows ...)
+ TODO: check
+CVE-2026-95115 (Buffer Overflow vulnerability in libwebsockets main 106d542c allows a ...)
+ TODO: check
+CVE-2026-95114 (libwebsockets contains an out-of-bounds read vulnerability in the LEJP ...)
+ TODO: check
+CVE-2026-94410 (A low privileged remote attacker is able to view a list of roles that ...)
+ TODO: check
+CVE-2026-93907 (IBM WebSphere Application Server 8.5, and 9.0 could allow a remote att ...)
+ TODO: check
+CVE-2026-93347 (Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-93346 (Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login ...)
+ TODO: check
+CVE-2026-93294 (A user with query access to an Azure Monitor data source can use its r ...)
+ TODO: check
+CVE-2026-92922 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
+ TODO: check
+CVE-2026-92911 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
+ TODO: check
+CVE-2026-92910 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
+ TODO: check
+CVE-2026-92909 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
+ TODO: check
+CVE-2026-92908 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
+ TODO: check
+CVE-2026-92892 (Potential arbitrary code execution, under specific configurations.)
+ TODO: check
+CVE-2026-92464 (Adobe Commerce is affected by an Improper Input Validation vulnerabili ...)
+ TODO: check
+CVE-2026-92088 (Improper handling of undefined values vulnerability in upKeeper Soluti ...)
+ TODO: check
+CVE-2026-91013 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
+ TODO: check
+CVE-2026-89309 (Vulnerability in tbc. This issue affects tbc: before 1.)
+ TODO: check
+CVE-2026-89279 (Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology ...)
+ TODO: check
+CVE-2026-89208 (A vulnerability has been identified in Capital Embedded AR Classic 431 ...)
+ TODO: check
+CVE-2026-89206 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89205 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89204 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89203 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89202 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89201 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89200 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89199 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89198 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89197 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89196 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)
+ TODO: check
+CVE-2026-89097 (The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPress i ...)
+ TODO: check
+CVE-2026-88838 (A flaw was found in BusyBox's mount utility. A non-root user can bypas ...)
+ TODO: check
+CVE-2026-88836
+ REJECTED
+CVE-2026-88834 (A flaw was found in BusyBox's httpd web server. When configured with s ...)
+ TODO: check
+CVE-2026-88833 (A flaw was found in BusyBox's udhcpc DHCP client. When processing raw ...)
+ TODO: check
+CVE-2026-85990 (Leantime is an open source project management system. Prior to 3.10.0, ...)
+ TODO: check
+CVE-2026-85747 (Distribution is a toolkit to pack, ship, store, and deliver container ...)
+ TODO: check
+CVE-2026-85733 (FrankenPHP is a modern application server for PHP. Prior to 1.12.5, th ...)
+ TODO: check
+CVE-2026-85115 (A vulnerability has been identified in .NET Client Library for SIMATIC ...)
+ TODO: check
+CVE-2026-85114 (A vulnerability has been identified in .NET Client Library for SIMATIC ...)
+ TODO: check
+CVE-2026-82416 (FrankenPHP is a modern application server for PHP. Prior to 1.12.5, Fr ...)
+ TODO: check
+CVE-2026-81507 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
+ TODO: check
+CVE-2026-78802 (An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fibe ...)
+ TODO: check
+CVE-2026-78799 (Directory Traversal vulnerability in Quanxun Huiju Network Technology ...)
+ TODO: check
+CVE-2026-78557 (A vulnerability has been identified in Industrial Edge App Publisher ( ...)
+ TODO: check
+CVE-2026-78556 (A vulnerability has been identified in Industrial Edge App Publisher ( ...)
+ TODO: check
+CVE-2026-77459 (Argo CD is a declarative, GitOps continuous delivery tool for Kubernet ...)
+ TODO: check
+CVE-2026-77375 (SFTPGo is an open source, event-driven file transfer solution. Prior t ...)
+ TODO: check
+CVE-2026-77362 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
+ TODO: check
+CVE-2026-77361 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
+ TODO: check
+CVE-2026-77100 (MediaAgent contained a heap-based buffer overflow issue affecting serv ...)
+ TODO: check
+CVE-2026-77099 (CVFS contained an input validation issue affecting command execution. ...)
+ TODO: check
+CVE-2026-77096 (CVFS contained a missing authentication condition affecting command ex ...)
+ TODO: check
+CVE-2026-77095 (CvFWD contained a null pointer dereference affecting service availabil ...)
+ TODO: check
+CVE-2026-77094 (CvFWD contained an out-of-bounds write affecting service availability. ...)
+ TODO: check
+CVE-2026-77093 (CvFWD contained an integer overflow affecting service availability. S ...)
+ TODO: check
+CVE-2026-77090 (CVFS contained an XML external entity (XXE) reference handling issue a ...)
+ TODO: check
+CVE-2026-75120 (The OpenText\u2122 (EnCase SAFE Agents) component utilized by OpenText ...)
+ TODO: check
+CVE-2026-74047 (Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vuln ...)
+ TODO: check
+CVE-2026-74045 (Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim ...)
+ TODO: check
+CVE-2026-74043 (Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-74041 (Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch betwee ...)
+ TODO: check
+CVE-2026-74040 (Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file over ...)
+ TODO: check
+CVE-2026-74037 (Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as ...)
+ TODO: check
+CVE-2026-74036 (Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulner ...)
+ TODO: check
+CVE-2026-74035 (Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypa ...)
+ TODO: check
+CVE-2026-74034 (Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_a ...)
+ TODO: check
+CVE-2026-74033 (Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-74032 (Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulner ...)
+ TODO: check
+CVE-2026-74031 (Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-74030 (Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias exp ...)
+ TODO: check
+CVE-2026-72895 (A vulnerability has been identified in SIMATIC IPC BX-21A (All version ...)
+ TODO: check
+CVE-2026-69227 (A flaw in Portal for ArcGIS allows unauthenticated access to certain / ...)
+ TODO: check
+CVE-2026-69226 (A flaw in Portal for ArcGIS allows unauthenticated users to create new ...)
+ TODO: check
+CVE-2026-67456 (NVIDIA Warp contains a vulnerability where an attacker could cause a h ...)
+ TODO: check
+CVE-2026-67165 (HCL Connections is vulnerable to a cross-site scripting attack where a ...)
+ TODO: check
+CVE-2026-66057 (Frappe is a full-stack web application framework. Prior to 15.116.0 an ...)
+ TODO: check
+CVE-2026-65200 (The openUBMC device-management process parses PLDM-over-MCTP and NCSI- ...)
+ TODO: check
+CVE-2026-65199 (openUBMC assigns the full privilege set to pseudo-identities represent ...)
+ TODO: check
+CVE-2026-65198 (Huawei's openUBMC ships a default SNMPv3 USM key that uses one value f ...)
+ TODO: check
+CVE-2026-65197 (H3C HDM Family-A verifies the RSA signature of a firmware image agains ...)
+ TODO: check
+CVE-2026-65180 (NVIDIA Megatron-LM contains a vulnerability in checkpoint loading wher ...)
+ TODO: check
+CVE-2026-65173 (NVIDIA AIStore for Linux contains a missing authentication vulnerabili ...)
+ TODO: check
+CVE-2026-65172 (NVIDIA AIStore for Linux and Kubernetes contains a missing authorizati ...)
+ TODO: check
+CVE-2026-65170 (NVIDIA AIStore for Linux contains a vulnerability in the experimental ...)
+ TODO: check
+CVE-2026-65164 (NVIDIA AIStore for Linux contains a path traversal vulnerability in th ...)
+ TODO: check
+CVE-2026-65162 (NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Ku ...)
+ TODO: check
+CVE-2026-65161 (NVIDIA AIStore for Linux contains a vulnerability in the Promote API w ...)
+ TODO: check
+CVE-2026-65150 (NVIDIA DALI contains a vulnerability where an attacker could cause an ...)
+ TODO: check
+CVE-2026-65149 (NVIDIA DALI contains a vulnerability where an attacker could cause an ...)
+ TODO: check
+CVE-2026-65148 (NVIDIA DALI contains a vulnerability where an attacker could cause a s ...)
+ TODO: check
+CVE-2026-65147 (NVIDIA DALI contains a vulnerability where an attacker could cause an ...)
+ TODO: check
+CVE-2026-65141 (NVIDIA Isaac Lab contains a vulnerability where an attacker could caus ...)
+ TODO: check
+CVE-2026-65131 (NVIDIA NVSentinel for Linux contains a vulnerability in the platform-c ...)
+ TODO: check
+CVE-2026-65110 (NVIDIA Megatron-LM contains a vulnerability in checkpoint loading wher ...)
+ TODO: check
+CVE-2026-65104 (NVIDIA Megatron-LM for all platforms contains a vulnerability in infer ...)
+ TODO: check
+CVE-2026-65103 (NVIDIA AIStore for Linux contains a path traversal vulnerability in th ...)
+ TODO: check
+CVE-2026-65101 (NVIDIA AIStore for Linux contains a vulnerability in the distributed s ...)
+ TODO: check
+CVE-2026-63357 (Affected devices do not properly sanitize calculated signal data conta ...)
+ TODO: check
+CVE-2026-63356 (Affected devices do not properly sanitize calculated signal names cont ...)
+ TODO: check
+CVE-2026-63355 (Affected devices do not properly sanitize signal names contained in im ...)
+ TODO: check
+CVE-2026-63354 (Affected devices do not properly validate and sanitize visual marker d ...)
+ TODO: check
+CVE-2026-63353 (Affected devices do not properly sanitize comment fields contained in ...)
+ TODO: check
+CVE-2026-63352 (Affected devices do not properly sanitize calculated signal data conta ...)
+ TODO: check
+CVE-2026-63351 (Affected devices do not properly validate and sanitize visual properti ...)
+ TODO: check
+CVE-2026-63350 (Affected devices do not properly restrict executable content contained ...)
+ TODO: check
+CVE-2026-63316 (A SQL injection vulnerability has been identified in Payload CMS. Impr ...)
+ TODO: check
+CVE-2026-59241 (A vulnerability has been identified in SIMATIC WinCC V7.5 (All version ...)
+ TODO: check
+CVE-2026-55823 (Frappe is a full-stack web application framework. Prior to 16.23.0, th ...)
+ TODO: check
+CVE-2026-55695 (FearlessCMS is a flat-file content management system centered on simpl ...)
+ TODO: check
+CVE-2026-55675 (The Salty documentation repository builds and deploys the docs.saltbox ...)
+ TODO: check
+CVE-2026-55562 (Cronicle is a multi-server task scheduler and runner, with a web based ...)
+ TODO: check
+CVE-2026-55376 (Heym builds and runs agentic systems and business-process automations ...)
+ TODO: check
+CVE-2026-55183 (RClone Manager is a cross-platform GUI application designed to help us ...)
+ TODO: check
+CVE-2026-54700 (ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct ...)
+ TODO: check
+CVE-2026-54697 (ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct ...)
+ TODO: check
+CVE-2026-54641 (OpenRemote is an open-source internet-of-things platform. Prior to 1.2 ...)
+ TODO: check
+CVE-2026-54640 (OpenRemote is an open-source internet-of-things platform. Prior to 1.2 ...)
+ TODO: check
+CVE-2026-54454 (OpenCATS is an open-source applicant tracking system and recruitment C ...)
+ TODO: check
+CVE-2026-54086 (SLE API for Java is an implementation of CCSDS Space Link Extension Se ...)
+ TODO: check
+CVE-2026-53711 (MCP Context Forge provides an MCP Admin UI for managing gateway resour ...)
+ TODO: check
+CVE-2026-53709 (MCP Context Forge is an MCP gateway and administrative platform. Prior ...)
+ TODO: check
+CVE-2026-53562 (Improper link resolution before file access ('link following') vulnera ...)
+ TODO: check
+CVE-2026-53420 (Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may ...)
+ TODO: check
+CVE-2026-53418 (Improper Authorization in Handler for Custom URL Scheme in Zoom Workpl ...)
+ TODO: check
+CVE-2026-52394 (DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted in ...)
+ TODO: check
+CVE-2026-4869 (A potential privilege escalation issue was identified in InstallShield ...)
+ TODO: check
+CVE-2026-49265 (OAuthLib is an implementation of the OAuth request-signing logic for P ...)
+ TODO: check
+CVE-2026-49264 (OAuthLib is an implementation of the OAuth request-signing logic for P ...)
+ TODO: check
+CVE-2026-44415 (Affected systems do not properly restrict access to internal APIs and ...)
+ TODO: check
+CVE-2026-44414 (A vulnerability has been identified in Industrial Edge Cloud Device (I ...)
+ TODO: check
+CVE-2026-37107 (An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privile ...)
+ TODO: check
+CVE-2026-33374 (The Prometheus rule conversion API endpoints in Grafana do not limit r ...)
+ TODO: check
+CVE-2026-23707 (An Improper Neutralization of Special Elements used in an SQL Command ...)
+ TODO: check
+CVE-2026-23706 (An Improper Neutralization of Special Elements used in an SQL Command ...)
+ TODO: check
+CVE-2026-23705 (An Improper Neutralization of Special Elements used in an SQL Command ...)
+ TODO: check
+CVE-2026-19940 (The Bluetooth Classic Hands-Free Profile Audio Gateway implementation ...)
+ TODO: check
+CVE-2026-19939 (The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIME ...)
+ TODO: check
+CVE-2026-18228 (HyperScale contained a path traversal issue affecting information disc ...)
+ TODO: check
+CVE-2026-15577 (A user or service account with read-only access to Git Sync (provision ...)
+ TODO: check
+CVE-2026-15399 (The Animated Number Counters plugin for WordPress is vulnerable to gen ...)
+ TODO: check
+CVE-2026-14308 (Zohocorp ManageEngine Malware Protection Plus versionsbefore 1.0.64.12 ...)
+ TODO: check
+CVE-2026-13138 (Client-Side Enforcement of Server-Side Security vulnerability in Divas ...)
+ TODO: check
+CVE-2026-12656 (A denial-of-service security issue exists in the affected product and ...)
+ TODO: check
+CVE-2026-12655 (A security issue exists within 1732E ArmorBlock\xae I/O, where an unau ...)
+ TODO: check
+CVE-2026-11732 (An insufficient input validation vulnerability in the website blocking ...)
+ TODO: check
+CVE-2026-11731 (An authentication bypass vulnerability in the listed NETGEAR RAX serie ...)
+ TODO: check
+CVE-2026-11730 (Insufficient session randomness vulnerability in the listed NETGEAR Ex ...)
+ TODO: check
+CVE-2026-110249 (A malicious, compromised, or MITM-controlled Exchange server can retur ...)
+ TODO: check
+CVE-2026-110247 (Several buffer-growth sites in libmime performed size arithmetic in 32 ...)
+ TODO: check
+CVE-2026-110240 (Lancet through 2.3.9 contains an SSRF protection bypass vulnerability ...)
+ TODO: check
+CVE-2026-110239 (Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulne ...)
+ TODO: check
+CVE-2026-110238 (Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass ...)
+ TODO: check
+CVE-2026-110237 (Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the s ...)
+ TODO: check
+CVE-2026-110236 (KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection v ...)
+ TODO: check
+CVE-2026-110235 (MP Manager through 1.1.0 contains a path traversal vulnerability that ...)
+ TODO: check
+CVE-2026-110234 (Elio through 1.13.0 contains an insecure temporary file vulnerability ...)
+ TODO: check
+CVE-2026-110233 (Rovr through 0.10.3 on Windows contains an OS command injection vulner ...)
+ TODO: check
+CVE-2026-110232 (Fossify File Manager through 1.6.2 contains a path traversal vulnerabi ...)
+ TODO: check
+CVE-2026-110231 (muCommander through 1.6.2 contains a path traversal vulnerability in U ...)
+ TODO: check
+CVE-2026-110230 (XBackBone through 3.8.2 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-110229 (QloApps through 1.7.0 contains an improper access control vulnerabilit ...)
+ TODO: check
+CVE-2026-110228 (wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting ...)
+ TODO: check
+CVE-2026-110226 (QloApps through 1.7.0 contains a broken access control vulnerability t ...)
+ TODO: check
+CVE-2026-110225 (Shaarli through 0.16.9 contains a server-side request forgery vulnerab ...)
+ TODO: check
+CVE-2026-110224 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-110223 (Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vu ...)
+ TODO: check
+CVE-2026-110222 (Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request f ...)
+ TODO: check
+CVE-2026-110221 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-110220 (Kubeflow Model Registry through 0.3.17 contains a server-side request ...)
+ TODO: check
+CVE-2026-110219 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-110218 (Aureus ERP through 1.6.0 contains an authorization bypass vulnerabilit ...)
+ TODO: check
+CVE-2026-110217 (Lenve vhr through commit 03abbd3 contains an information disclosure vu ...)
+ TODO: check
+CVE-2026-110216 (youlai-boot through 2.21.1 contains a missing authorization vulnerabil ...)
+ TODO: check
+CVE-2026-110215 (youlai-boot through 2.21.1 contains a missing authorization vulnerabil ...)
+ TODO: check
+CVE-2026-110214 (Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows u ...)
+ TODO: check
+CVE-2026-110213 (Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct obj ...)
+ TODO: check
+CVE-2026-110212 (Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulne ...)
+ TODO: check
+CVE-2026-110211 (iFlytek SkillHub through 0.2.22 contains a missing authorization vulne ...)
+ TODO: check
+CVE-2026-110210 (Phase Console through 2.77.3 contains a missing authorization vulnerab ...)
+ TODO: check
+CVE-2026-110209 (Stonewuu ai-fusion-video through 1.2.0 contains a missing authorizatio ...)
+ TODO: check
+CVE-2026-110208 (Wukong AICRM through 20260610 contains a missing authorization vulnera ...)
+ TODO: check
+CVE-2026-110207 (Wukong AICRM through 20260610 contains a missing authorization vulnera ...)
+ TODO: check
+CVE-2026-110206 (Roo Code through 3.54.0 contains a command approval bypass vulnerabili ...)
+ TODO: check
+CVE-2026-110205 (Roo Code through 3.54.0 contains a command approval bypass vulnerabili ...)
+ TODO: check
+CVE-2026-110204 (Roo Code through 3.54.0 contains a command approval bypass vulnerabili ...)
+ TODO: check
+CVE-2026-110203 (Roo Code through 3.54.0 contains a command approval bypass vulnerabili ...)
+ TODO: check
+CVE-2026-110202 (Roo Code through 3.54.0 contains a command approval bypass vulnerabili ...)
+ TODO: check
+CVE-2026-110131 (ThriveX-Server through 4.0 contains a missing authorization vulnerabil ...)
+ TODO: check
+CVE-2026-110129 (fuintCatering through commit 122c9e6 contains an insecure direct objec ...)
+ TODO: check
+CVE-2026-110128 (fuint through commit 4c4bc8a contains a missing authentication vulnera ...)
+ TODO: check
+CVE-2026-110127 (waynboot-mall through 2.0.0 contains an insecure direct object referen ...)
+ TODO: check
+CVE-2026-110126 (waynboot-mall through 2.0.0 contains an insecure direct object referen ...)
+ TODO: check
+CVE-2026-110125 (Waynboot-mall through 2.0.0 contains an insecure direct object referen ...)
+ TODO: check
+CVE-2026-110124 (FastBee through 2.1.0 contains an insecure direct object reference vul ...)
+ TODO: check
+CVE-2026-110123 (Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization ...)
+ TODO: check
+CVE-2026-110122 (PickMall lilishop through 4.4 contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-110121 (PickMall lilishop through 4.4 contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-110120 (Yshopmall through 2.0.0 contains an insecure direct object reference v ...)
+ TODO: check
+CVE-2026-110119 (Yshopmall through 2.0.0 contains an insecure direct object reference v ...)
+ TODO: check
+CVE-2026-110118 (WorkFlow-Engine through 9.6.11 contains a missing authorization vulner ...)
+ TODO: check
+CVE-2026-110117 (SmartAdmin through 3.30.0 contains a missing authorization vulnerabili ...)
+ TODO: check
+CVE-2026-110116 (Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a pat ...)
+ TODO: check
+CVE-2026-110115 (Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path t ...)
+ TODO: check
+CVE-2026-110114 (FJ-OMS oms-erp through PRE contains a missing authentication vulnerabi ...)
+ TODO: check
+CVE-2026-110113 (PublicCMS through V6.202608.a contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-110110 (JetLinks Community through 2.10.0 contains a missing authorization vul ...)
+ TODO: check
+CVE-2026-110109 (JetLinks Community through 2.10.0 contains a missing authorization vul ...)
+ TODO: check
+CVE-2026-110108 (MateCloud through 5.0.8 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-110107 (RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object refe ...)
+ TODO: check
+CVE-2026-110106 (RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object refere ...)
+ TODO: check
+CVE-2026-110105 (B3log Symphony through 3.6.4 contains a missing authorization vulnerab ...)
+ TODO: check
+CVE-2026-110104 (Xxyopen novel through 3.5.0 contains a weak password hashing vulnerabi ...)
+ TODO: check
+CVE-2026-110103 (bbs-go through 4.4.6 contains a stored cross-site scripting vulnerabil ...)
+ TODO: check
+CVE-2026-110102 (Powerlevel10k through 1.20.0 contains an insecure download vulnerabili ...)
+ TODO: check
+CVE-2026-110101 (Koillection through 1.8.4 contains a stored cross-site scripting vulne ...)
+ TODO: check
+CVE-2026-110100 (Jorani before 1.0.4 contains a missing authorization vulnerability in ...)
+ TODO: check
+CVE-2026-110099 (Jorani before 1.0.4 contains a missing authorization vulnerability in ...)
+ TODO: check
+CVE-2026-110098 (Jorani before 1.0.4 contains an insecure direct object reference vulne ...)
+ TODO: check
+CVE-2026-110097 (Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerabi ...)
+ TODO: check
+CVE-2026-110036 (A flaw was found in device-mapper-persistent-data. A local attacker ca ...)
+ TODO: check
+CVE-2026-110025 (A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This is ...)
+ TODO: check
+CVE-2026-10759 (A flaw in Portal for ArcGIS could allow LDAP injection through adminis ...)
+ TODO: check
+CVE-2026-109976 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-s ...)
+ TODO: check
+CVE-2026-109967 (yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulner ...)
+ TODO: check
+CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerabili ...)
+ TODO: check
+CVE-2026-109965 (Serena before 2.0.0 contains an improper link resolution vulnerability ...)
+ TODO: check
+CVE-2026-109964 (ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer under ...)
+ TODO: check
+CVE-2026-109963 (Froxlor before 2.3.14 contains an insecure direct object reference vul ...)
+ TODO: check
+CVE-2026-109962 (Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerab ...)
+ TODO: check
+CVE-2026-109961 (Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerabilit ...)
+ TODO: check
+CVE-2026-109960 (Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vul ...)
+ TODO: check
+CVE-2026-109959 (EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability t ...)
+ TODO: check
+CVE-2026-109958 (EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulner ...)
+ TODO: check
+CVE-2026-109957 (EspoCRM before 10.0.7 contains an insecure direct object reference vul ...)
+ TODO: check
+CVE-2026-109956 (NLTK through 3.10.3 contains a path traversal vulnerability in WekaCla ...)
+ TODO: check
+CVE-2026-109955 (Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerabi ...)
+ TODO: check
+CVE-2026-109954 (Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 share ...)
+ TODO: check
+CVE-2026-109953 (FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected crede ...)
+ TODO: check
+CVE-2026-109952 (The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selecte ...)
+ TODO: check
+CVE-2026-109951 (FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerab ...)
+ TODO: check
+CVE-2026-109950 (FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vu ...)
+ TODO: check
+CVE-2026-109949 (FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excess ...)
+ TODO: check
+CVE-2026-109948 (FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disc ...)
+ TODO: check
+CVE-2026-109947 (FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource al ...)
+ TODO: check
+CVE-2026-109946 (FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v ...)
+ TODO: check
+CVE-2026-109945 (FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerabili ...)
+ TODO: check
+CVE-2026-109944 (FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_ ...)
+ TODO: check
+CVE-2026-109943 (FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's as ...)
+ TODO: check
+CVE-2026-109942 (FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_ ...)
+ TODO: check
+CVE-2026-109941 (FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerabili ...)
+ TODO: check
+CVE-2026-109940 (FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support ...)
+ TODO: check
+CVE-2026-109939 (FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in up ...)
+ TODO: check
+CVE-2026-109938 (Positive mapped-video coordinates overflow and abort FreeRDP clients A ...)
+ TODO: check
+CVE-2026-109898 (Missing Authorization vulnerability in Arraytics WP Event Solution wp- ...)
+ TODO: check
+CVE-2026-109896 (Missing Authorization vulnerability in WP Chill Download Monitor integ ...)
+ TODO: check
+CVE-2026-109890 (Missing Authorization vulnerability in LeapWorx Premium Addons for Ele ...)
+ TODO: check
+CVE-2026-109854 (A flaw was found in m17n-lib. An attacker who supplies crafted input t ...)
+ TODO: check
+CVE-2026-109833 (A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterpr ...)
+ TODO: check
+CVE-2026-109832 (A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterpr ...)
+ TODO: check
+CVE-2026-109828 (A vulnerability was found in libsndfile up to 1.2.2. This issue affect ...)
+ TODO: check
+CVE-2026-109827 (A vulnerability has been found in GPAC up to 26.07.0. This vulnerabili ...)
+ TODO: check
+CVE-2026-109703 (Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql ...)
+ TODO: check
+CVE-2026-109699 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
+ TODO: check
+CVE-2026-109697 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-109696 (Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards ...)
+ TODO: check
+CVE-2026-109691 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-109687 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-109684 (Missing Authorization vulnerability in TMS Amelia ameliabooking allows ...)
+ TODO: check
+CVE-2026-109680 (FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in f ...)
+ TODO: check
+CVE-2026-109679 (FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference ...)
+ TODO: check
+CVE-2026-109678 (FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR asser ...)
+ TODO: check
+CVE-2026-109677 (FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read ...)
+ TODO: check
+CVE-2026-109676 (FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulne ...)
+ TODO: check
+CVE-2026-109620 (A vulnerability has been found in SourceCodester Online Reviewer Syste ...)
+ TODO: check
+CVE-2026-109607 (A flaw has been found in SourceCodester Online Exam System 1.0. Affect ...)
+ TODO: check
+CVE-2026-109606 (A vulnerability was detected in SourceCodester Art Gallery Management ...)
+ TODO: check
+CVE-2026-109605 (A security vulnerability has been detected in SourceCodester Simple Ca ...)
+ TODO: check
+CVE-2026-109526 (A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. T ...)
+ TODO: check
+CVE-2026-109525 (A vulnerability was identified in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-109524 (A vulnerability was determined in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-109523 (A vulnerability was found in girishsaraf Online-Appointment-Booking-Sy ...)
+ TODO: check
+CVE-2026-109522 (A vulnerability has been found in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-109521 (A vulnerability was detected in girishsaraf Online-Appointment-Booking ...)
+ TODO: check
+CVE-2026-109520 (A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by th ...)
+ TODO: check
+CVE-2026-109519 (A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. A ...)
+ TODO: check
+CVE-2026-109429 (Mistral Vibe before 2.25.4 contains a command permission gate bypass v ...)
+ TODO: check
+CVE-2026-109428 (Mistral Vibe before 2.25.5 contains a permission validation bypass vul ...)
+ TODO: check
+CVE-2026-109412 (An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allow ...)
+ TODO: check
+CVE-2026-109410 (A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The i ...)
+ TODO: check
+CVE-2026-109409 (A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affect ...)
+ TODO: check
+CVE-2026-109407 (A security vulnerability has been detected in macrozheng mall up to 1. ...)
+ TODO: check
+CVE-2026-109406 (A weakness has been identified in macrozheng mall up to 1.0.3. This vu ...)
+ TODO: check
+CVE-2026-109405 (A security flaw has been discovered in conductor-oss conductor up to 3 ...)
+ TODO: check
+CVE-2026-109404 (A vulnerability was identified in conductor-oss conductor up to 3.33.0 ...)
+ TODO: check
+CVE-2026-109403 (A vulnerability was determined in conductor-oss conductor up to 3.32.5 ...)
+ TODO: check
+CVE-2026-109402 (A vulnerability was found in conductor-oss conductor 3.22.0. Affected ...)
+ TODO: check
+CVE-2026-109190 (A vulnerability has been found in conductor-oss conductor 3.31.2. This ...)
+ TODO: check
+CVE-2026-109189 (A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. ...)
+ TODO: check
+CVE-2026-109162 (Forms using FileUpload or ImageUpload elements with a custom saveToFil ...)
+ TODO: check
+CVE-2026-109160 (A vulnerability was determined in PublicCMS up to 5.202608.a. Affected ...)
+ TODO: check
+CVE-2026-109157 (A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by ...)
+ TODO: check
+CVE-2026-109156 (A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affec ...)
+ TODO: check
+CVE-2026-109155 (A flaw has been found in DeepPavlov up to 1.7.0. This impacts the func ...)
+ TODO: check
+CVE-2026-109153 (A vulnerability was detected in MosaicML Composer up to 0.32.1. This a ...)
+ TODO: check
+CVE-2026-109152 (A security vulnerability has been detected in jbardin scp.py up to 0.1 ...)
+ TODO: check
+CVE-2026-109149 (A weakness has been identified in beautifier js-beautify up to 1.15.1/ ...)
+ TODO: check
+CVE-2026-109144 (A vulnerability was identified in wbond certvalidator up to 0.11.1. Th ...)
+ TODO: check
+CVE-2026-109143 (A vulnerability was determined in calcom cal.com and cal.diy up to 6.2 ...)
+ TODO: check
+CVE-2026-109116 (A vulnerability was determined in AdithyaYelloju Restaurant-Management ...)
+ TODO: check
+CVE-2026-109115 (A vulnerability was found in AdithyaYelloju Restaurant-Management-Syst ...)
+ TODO: check
+CVE-2026-109114 (A vulnerability has been found in AdithyaYelloju Restaurant-Management ...)
+ TODO: check
+CVE-2026-109110 (A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affect ...)
+ TODO: check
+CVE-2026-109109 (A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vul ...)
+ TODO: check
+CVE-2026-109108 (A security vulnerability has been detected in Wavlink WL-WN530BE1-A 25 ...)
+ TODO: check
+CVE-2026-109107 (A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected ...)
+ TODO: check
+CVE-2026-108496 (Missing Authorization vulnerability in WP User Manager WP User Manager ...)
+ TODO: check
+CVE-2026-108495 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108493 (Missing Authorization vulnerability in Karol\xedna Vysko\u010dilov\xe1 ...)
+ TODO: check
+CVE-2026-108492 (Missing Authorization vulnerability in Fullworks Plugins Quick Paypal ...)
+ TODO: check
+CVE-2026-108490 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108489 (Insertion of Sensitive Information Into Sent Data vulnerability in Plu ...)
+ TODO: check
+CVE-2026-108488 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108487 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-108385 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108384 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108383 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108382 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108381 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108380 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108379 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108378 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108377 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108376 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108375 (dataclasses-avroschema generates Avro schemas from Python dataclasses, ...)
+ TODO: check
+CVE-2026-108185 (Improper certificate validation in the My Notes feature of certain Zoo ...)
+ TODO: check
+CVE-2026-108184 (Improper certificate validation in certain Zoom Clients for Windows ma ...)
+ TODO: check
+CVE-2026-108179 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-108174 (Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-cu ...)
+ TODO: check
+CVE-2026-107918 (Insufficient input validation vulnerability in the LAN Setup feature o ...)
+ TODO: check
+CVE-2026-107917 (Insufficient input validation vulnerability in the PPPoE Setup feature ...)
+ TODO: check
+CVE-2026-107832 (fastify is a fast and low overhead web framework for Node.js. In versi ...)
+ TODO: check
+CVE-2026-107607 (SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Mi ...)
+ TODO: check
+CVE-2026-107606 (SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Mi ...)
+ TODO: check
+CVE-2026-107605 (SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Mi ...)
+ TODO: check
+CVE-2026-107460 (Server-Side Request Forgery (SSRF) protection in the UrlImageConverter ...)
+ TODO: check
+CVE-2026-106625 (Adobe Framemaker is affected by an out-of-bounds write vulnerability t ...)
+ TODO: check
+CVE-2026-106598 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
+ TODO: check
+CVE-2026-106597 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
+ TODO: check
+CVE-2026-106176 (A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may ...)
+ TODO: check
+CVE-2026-106175 (A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiO ...)
+ TODO: check
+CVE-2026-106173 (A improper limitation of a pathname to a restricted directory ('path t ...)
+ TODO: check
+CVE-2026-106172 (A use of hard-coded cryptographic key vulnerability in Fortinet FortiS ...)
+ TODO: check
+CVE-2026-106171 (A improper neutralization of special elements used in an os command (' ...)
+ TODO: check
+CVE-2026-106170 (An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortine ...)
+ TODO: check
+CVE-2026-106108 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106047 (A Path Traversal vulnerability in the template export functionality of ...)
+ TODO: check
+CVE-2026-106043 (A Missing Authentication for Critical Function vulnerability in Ivanti ...)
+ TODO: check
+CVE-2026-106042 (An External Control of File Name or Path vulnerability in Ivanti Xtrac ...)
+ TODO: check
+CVE-2026-106035 (An Information Exposure Through Log Files vulnerability in Ivanti Xtra ...)
+ TODO: check
+CVE-2026-106034 (A Path Traversal vulnerability in Ivanti Xtraction before version 2026 ...)
+ TODO: check
+CVE-2026-105881 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-105460 (A flaw was found in BlueZ. An out-of-bounds read vulnerability exists ...)
+ TODO: check
+CVE-2026-105445 (An Incorrect Privilege Assignment vulnerability in Docker Hub's accoun ...)
+ TODO: check
+CVE-2026-104937 (Shopware version 6.7 allows the upload of attacker\u2011controlled HTM ...)
+ TODO: check
+CVE-2026-104935 (Authentication bypass by spoofing in ICS before version 25.1.3.0 allow ...)
+ TODO: check
+CVE-2026-104817 (Misskey is an open source, federated social media platform. From 12.11 ...)
+ TODO: check
+CVE-2026-104816 (Misskey is an open source, federated social media platform. From 12.0. ...)
+ TODO: check
+CVE-2026-104344 (Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerabi ...)
+ TODO: check
+CVE-2026-104343 (Adobe Framemaker is affected by a NULL Pointer Dereference vulnerabili ...)
+ TODO: check
+CVE-2026-104342 (Adobe Framemaker is affected by a Use After Free vulnerability that co ...)
+ TODO: check
+CVE-2026-104341 (Adobe Framemaker is affected by an out-of-bounds write vulnerability t ...)
+ TODO: check
+CVE-2026-104340 (Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerabi ...)
+ TODO: check
+CVE-2026-104250 (The unstructured library provides open-source components for ingesting ...)
+ TODO: check
+CVE-2026-104192 (Dragonfly is an in-memory data store built for modern application work ...)
+ TODO: check
+CVE-2026-104126 (JumpServer is an open source bastion host and an operation and mainten ...)
+ TODO: check
+CVE-2026-104085 (odt2spip plugin for SPIP before 4.4.0 contains an OS command injection ...)
+ TODO: check
+CVE-2026-104011
+ REJECTED
+CVE-2026-104005 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
+ TODO: check
+CVE-2026-104004 (MongoDB Server's collection validation feature may not properly handle ...)
+ TODO: check
+CVE-2026-103967 (Adobe Framemaker is affected by an out-of-bounds write vulnerability t ...)
+ TODO: check
+CVE-2026-103966 (Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerabi ...)
+ TODO: check
+CVE-2026-103965 (An issue in MongoDB Server's aggregation framework can cause certain c ...)
+ TODO: check
+CVE-2026-103937 (Misskey is an open source, federated social media platform. From 13.0. ...)
+ TODO: check
+CVE-2026-103928 (Metabase is an open source business intelligence and analytics platfor ...)
+ TODO: check
+CVE-2026-103857 (Adobe Framemaker is affected by an out-of-bounds read vulnerability th ...)
+ TODO: check
+CVE-2026-103856 (Adobe Framemaker is affected by an out-of-bounds read vulnerability th ...)
+ TODO: check
+CVE-2026-103849 (Adobe Commerce is affected by an Improper Neutralization of Special El ...)
+ TODO: check
+CVE-2026-103572 (Improper control of generation of code ('code injection') in Visual St ...)
+ TODO: check
+CVE-2026-103499 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 ...)
+ TODO: check
+CVE-2026-103418 (Firefox for iOS directly interpolated the page\u2019s HTML language at ...)
+ TODO: check
+CVE-2026-103417 (Firefox for iOS could autofill saved credentials into a new page if cr ...)
+ TODO: check
+CVE-2026-103076 (Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Reg ...)
+ TODO: check
+CVE-2026-103030 (Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2 ...)
+ TODO: check
+CVE-2026-103028 (SFTPGo is an open source, event-driven file transfer solution. From 2. ...)
+ TODO: check
+CVE-2026-102989 (TanStack Router is a client-first, server-capable, fully type-safe rou ...)
+ TODO: check
+CVE-2026-102988 (Plane is an open-source project management tool. Prior to 1.4.0, multi ...)
+ TODO: check
+CVE-2026-102982 (Plane is an open-source project management tool. Prior to 1.4.0, the p ...)
+ TODO: check
+CVE-2026-102981 (Plane is an open-source project management tool. Prior to 1.4.0, self- ...)
+ TODO: check
+CVE-2026-102850 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
+ TODO: check
+CVE-2026-102849 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
+ TODO: check
+CVE-2026-102832 (JupyterLab is an extensible environment for interactive and reproducib ...)
+ TODO: check
+CVE-2026-102734 (asteval is a Python expression evaluator designed for restricted execu ...)
+ TODO: check
+CVE-2026-102672 (Electron is a framework for writing cross-platform desktop application ...)
+ TODO: check
+CVE-2026-102603 (Gotify server is a simple server for sending and receiving messages in ...)
+ TODO: check
+CVE-2026-102562 (The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2026-102342 (ammonia is a Rust library for repairing and securing untrusted HTML. P ...)
+ TODO: check
+CVE-2026-102250 (CWE-345: Insufficient Verification of Data Authenticity vulnerability ...)
+ TODO: check
+CVE-2026-102076 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All ...)
+ TODO: check
+CVE-2026-102075 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All ...)
+ TODO: check
+CVE-2026-102074 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All ...)
+ TODO: check
+CVE-2026-102073 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All ...)
+ TODO: check
+CVE-2026-102007 (The Bit integrations \u2013 Form Integration, Webhook, Spreadsheets, C ...)
+ TODO: check
+CVE-2026-101899 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
+ TODO: check
+CVE-2026-101020 (An incorrect permission assignment for critical resource issue exists ...)
+ TODO: check
+CVE-2026-100133 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
+ TODO: check
+CVE-2026-0893 (AMI APTIOV contains a vulnerability in BIOS where an attacker may caus ...)
+ TODO: check
+CVE-2025-58774 (AMI APTIOV contains vulnerabilities in BIOS where users may cause \u20 ...)
+ TODO: check
+CVE-2025-58773 (AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out ...)
+ TODO: check
+CVE-2025-58772 (AMI APTIOV contains vulnerabilities in BIOS where users may cause \u20 ...)
+ TODO: check
+CVE-2025-58771 (AMI APTIOV contains vulnerabilities in BIOS where users may cause \u20 ...)
+ TODO: check
+CVE-2025-57739 (An improper neutralization of special elements used in an SQL Command ...)
+ TODO: check
+CVE-2025-46773 (An Improper Neutralization of Special Elements used in an SQL Command ...)
+ TODO: check
+CVE-2024-34326 (ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflec ...)
+ TODO: check
+CVE-2024-34324 (An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to ex ...)
+ TODO: check
+CVE-2024-34323 (ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insec ...)
+ TODO: check
+CVE-2024-34321 (ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflec ...)
+ TODO: check
+CVE-2024-34320 (ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incor ...)
+ TODO: check
+CVE-2024-34319 (A Server-Side Request Forgery (SSRF) in the serviceURL parameter of Pr ...)
+ TODO: check
+CVE-2026-109783 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109783
-CVE-2026-109782
+CVE-2026-109782 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109782
-CVE-2026-109704
+CVE-2026-109704 (Privilege escalation in the Application Update component. This vulnera ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109704
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109704
-CVE-2026-109705
+CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary conditi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109705
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109705
-CVE-2026-109706
+CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109706
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109706
-CVE-2026-109707
+CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109707
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109707
-CVE-2026-109708
+CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the Networking ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109708
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109708
-CVE-2026-109709
+CVE-2026-109709 (Information disclosure, privilege escalation in the Security: Process ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109709
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109709
-CVE-2026-109710
+CVE-2026-109710 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109710
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109710
-CVE-2026-109711
+CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109711
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109711
-CVE-2026-109712
+CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109712
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109712
-CVE-2026-109713
+CVE-2026-109713 (Use-after-free in the Crash Reporting component. This vulnerability wa ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109713
-CVE-2026-109714
+CVE-2026-109714 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109714
-CVE-2026-109715
+CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109715
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109715
-CVE-2026-109716
+CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109716
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109716
-CVE-2026-109717
+CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109717
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109717
-CVE-2026-109718
+CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109718
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109718
-CVE-2026-109719
+CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109719
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109719
-CVE-2026-109720
+CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109720
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109720
-CVE-2026-109721
+CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109721
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109721
-CVE-2026-109722
+CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109722
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109722
-CVE-2026-109723
+CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component. This vulnera ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109723
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109723
-CVE-2026-109724
+CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109724
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109724
-CVE-2026-109725
+CVE-2026-109725 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109725
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109725
-CVE-2026-109726
+CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109726
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109726
-CVE-2026-109727
+CVE-2026-109727 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109727
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109727
-CVE-2026-109728
+CVE-2026-109728 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109728
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109728
-CVE-2026-109729
+CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109729
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109729
-CVE-2026-109730
+CVE-2026-109730 (Integer overflow in the Graphics component. This vulnerability was fix ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109730
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109730
-CVE-2026-109731
+CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D component. Thi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109731
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109731
-CVE-2026-109732
+CVE-2026-109732 (Use-after-free in the DOM: Streams component. This vulnerability was f ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109732
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109732
-CVE-2026-109733
+CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109733
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109733
-CVE-2026-109734
+CVE-2026-109734 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109734
-CVE-2026-109735
+CVE-2026-109735 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109735
-CVE-2026-109736
+CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109736
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109736
-CVE-2026-109737
+CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109737
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109737
-CVE-2026-109738
+CVE-2026-109738 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109738
-CVE-2026-109739
+CVE-2026-109739 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109739
-CVE-2026-109740
+CVE-2026-109740 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109740
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109740
-CVE-2026-109741
+CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. This vuln ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109741
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109741
-CVE-2026-109742
+CVE-2026-109742 (Information disclosure in the PDF Viewer component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109742
-CVE-2026-109743
+CVE-2026-109743 (Privilege escalation in the Panning and Zooming component. This vulner ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109743
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109743
-CVE-2026-109744
+CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109744
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109744
-CVE-2026-109745
+CVE-2026-109745 (Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109745
-CVE-2026-109746
+CVE-2026-109746 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109746
-CVE-2026-109747
+CVE-2026-109747 (Other issue in the Address Bar component. This vulnerability was fixed ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109747
-CVE-2026-109748
+CVE-2026-109748 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109748
-CVE-2026-109749
+CVE-2026-109749 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109749
-CVE-2026-109750
+CVE-2026-109750 (Site isolation issue in the DOM: Web Authentication component. This vu ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109750
-CVE-2026-109751
+CVE-2026-109751 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109751
-CVE-2026-109752
+CVE-2026-109752 (Use-after-free in the DOM: Workers component. This vulnerability was f ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109752
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109752
-CVE-2026-109753
+CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109753
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109753
-CVE-2026-109754
+CVE-2026-109754 (Incorrect boundary conditions in the DOM: Editor component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109754
-CVE-2026-109755
+CVE-2026-109755 (Sandbox escape in the DOM: Content Processes component. This vulnerabi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109755
-CVE-2026-109756
+CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109756
-CVE-2026-109757
+CVE-2026-109757 (Sandbox escape due to race condition in the Networking component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109757
-CVE-2026-109759
+CVE-2026-109759 (Site isolation issue in the Networking component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109759
-CVE-2026-109760
+CVE-2026-109760 (Mitigation bypass in the Networking: HTTP component. This vulnerabilit ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109760
-CVE-2026-109761
+CVE-2026-109761 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109761
-CVE-2026-109762
+CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109762
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109762
-CVE-2026-109763
+CVE-2026-109763 (Mitigation bypass in the File Handling component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109763
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109763
-CVE-2026-109764
+CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109764
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109764
-CVE-2026-109765
+CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text component. This v ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109765
-CVE-2026-109766
+CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109766
-CVE-2026-109767
+CVE-2026-109767 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109767
-CVE-2026-109768
+CVE-2026-109768 (Denial-of-service in the Site Reports component. This vulnerability wa ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109768
-CVE-2026-109769
+CVE-2026-109769 (Information disclosure in the Networking: Cache component. This vulner ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109769
-CVE-2026-109770
+CVE-2026-109770 (Spoofing issue in the DOM: Web Serial component. This vulnerability wa ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109770
-CVE-2026-109771
+CVE-2026-109771 (Information disclosure in the WebRTC: Networking component. This vulne ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109771
-CVE-2026-109772
+CVE-2026-109772 (Same-origin policy bypass in the DevTools component. This vulnerabilit ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109772
-CVE-2026-109773
+CVE-2026-109773 (Denial-of-service in the Sync component. This vulnerability was fixed ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109773
-CVE-2026-109774
+CVE-2026-109774 (Invalid pointer, undefined behavior in the DOM: Notifications componen ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109774
-CVE-2026-109775
+CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability was fixe ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109775
-CVE-2026-109776
+CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was fixed in ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109776
-CVE-2026-109777
+CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109777
-CVE-2026-109778
+CVE-2026-109778 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109778
-CVE-2026-109779
+CVE-2026-109779 (Race condition in the Networking: DNS component. This vulnerability wa ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109779
-CVE-2026-109780
+CVE-2026-109780 (Mitigation bypass in the DOM: Core & HTML component. This vulnerabilit ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109780
-CVE-2026-109781
+CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulnerabilit ...)
- firefox <unfixed>
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
-CVE-2026-102699
+CVE-2026-102699 ([This CNA information record relates to multiple CVEs; the text explai ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-519.html
-CVE-2026-102702
+CVE-2026-102702 ([This CNA information record relates to multiple CVEs; the text explai ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-519.html
CVE-2026-102701
NOT-FOR-US: tapdisk
NOTE: https://xenbits.xen.org/xsa/advisory-521.html
-CVE-2026-102700
+CVE-2026-102700 (With its original introduction, GNTTAB_cache_flush was made available ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-520.html
-CVE-2026-79611
+CVE-2026-79611 (For XSA-308 logic was introduced, as VMX VMEntry checks do not like th ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-518.html
-CVE-2026-79610
+CVE-2026-79610 (XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing cer ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-517.html
-CVE-2026-79609
+CVE-2026-79609 (XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (C ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-516.html
-CVE-2026-79608
+CVE-2026-79608 (The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-wor ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-515.html
-CVE-2026-79607
+CVE-2026-79607 (During Xenstore live update the state record for a Xenstore watch with ...)
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-514.html
CVE-2026-XXXX [GHSA-w6x2-f5m4-xw82: Arbitrary command execution via bash arithmetic expansion on unvalidated layout size in fzf-tmux (-l/-u attached value)]
@@ -2816,7 +3704,7 @@ CVE-2026-42705 (Unauthenticated Broken Access Control in Grand News <= 3.4 versi
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42704 (Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-42702 (Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versi ...)
+CVE-2026-42702 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42699 (Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 ver ...)
NOT-FOR-US: WordPress plugin or theme
@@ -3333,7 +4221,7 @@ CVE-2026-107373 (ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44245994/
NOTE: https://rt.cpan.org/Public/Bug/Display.html?id=94110
NOTE: Fixed by: https://github.com/tsee/extutils-typemap-default/commit/a6b9c298b34ddadc582961403e715d292f82a22d (ExtUtils-Typemaps-Default-1.06)
-CVE-2026-69150
+CVE-2026-69150 (KeePassXC is a cross-platform community-driven port of the Windows app ...)
- keepassxc <unfixed> (bug #1150520)
[trixie] - keepassxc <no-dsa> (Minor issue)
[bookworm] - keepassxc <postponed> (Minor issue)
@@ -7216,7 +8104,7 @@ CVE-2026-39788 (Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39787 (Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1. ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-39785 (Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versio ...)
+CVE-2026-39785 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39784 (Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 ver ...)
NOT-FOR-US: WordPress plugin or theme
@@ -7322,7 +8210,7 @@ CVE-2026-32577 (Unauthenticated Cross Site Scripting (XSS) in Frontend File Mana
NOT-FOR-US: WordPress plugin or theme
CVE-2026-32575 (Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 1 ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-32574 (Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 v ...)
+CVE-2026-32574 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-32572 (Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= ...)
NOT-FOR-US: WordPress plugin or theme
@@ -7365,750 +8253,750 @@ CVE-2026-106440 (Hydra is a framework for elegantly configuring complex applicat
CVE-2026-106439 (Hydra is a framework for elegantly configuring complex applications. F ...)
NOT-FOR-US: Hydra (different from src:hydra)
CVE-2026-106427 (Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106426 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106425 (Missing authorization in BrowserTag in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106424 (Information leak in Audio in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106423 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106422 (Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106421 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106420 (Incorrect calculation in API in Google Chrome on on Windows prior to 1 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106419 (Use after free in ANGLE in Google Chrome on on Android prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106418 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106417 (Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106416 (Code injection in Extensions in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106415 (Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106414 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106413 (Race condition in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106412 (Race condition in Core in Google Chrome on on Mac prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106411 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106410 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106409 (Incorrect reference resolution in WebAppInstalls in Google Chrome on o ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106408 (Protection mechanism failure in Mobile in Google Chrome on on iOS prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106407 (Incorrect authorization in GetUserMedia in Google Chrome prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106406 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106405 (Race condition in CustomTabs in Google Chrome on on Android prior to 1 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106404 (Incorrect authorization in FontAccess in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106403 (Incorrect authorization in Accessibility in Google Chrome prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106402 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106401 (Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106400 (Clickjacking in Messages in Google Chrome on on Android prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106396 (Improper input validation in Omnibox in Google Chrome on on Android pr ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106395 (Uninitialized resource in Dawn in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106394 (Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106393 (Use after free in Storage in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106392 (Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106391 (Incorrect authorization in WebShare in Google Chrome on on Android pri ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106390 (Incorrect provision of specified functionality in SanitizerAPI in Goog ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106389 (Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106388 (Missing authorization in DataTransfer in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106387 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106386 (Uninitialized resource in WebAudio in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106385 (Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106384 (Missing authorization in SiteIsolation in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106383 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106382 (Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106381 (Incorrect authorization in Passwords in Google Chrome on on iOS prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106380 (UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106376 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106375 (Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106374 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106373 (Use after free in Fonts in Google Chrome on on Windows prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106372 (Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106371 (Incorrect authorization in Transactions Platform in Google Chrome on o ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106370 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106369 (Missing authorization in Translate in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106368 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106367 (Missing authorization in Mobile in Google Chrome on on Android prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106366 (Incomplete cleanup in CustomTabs in Google Chrome on on Android prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106365 (Missing authorization in Animation in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106364 (Incorrect authorization in Omnibox in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106363 (Missing authorization in FullScreen in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106362 (Missing authorization in DevTools in Google Chrome prior to 155.0.8059 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106361 (Incorrect provision of specified functionality in Mobile in Google Chr ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106360 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106359 (Confused deputy in DeviceBoundSessionCredentials in Google Chrome prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106358 (Use after free in Navigation in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106357 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106356 (Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106355 (Missing authorization in Media in Google Chrome on on Windows prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106354 (Improper resource exposure in Extensions in Google Chrome prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106353 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106352 (Incorrect authorization in WebProtect in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106351 (Observable discrepancy in Safebrowsing in Google Chrome on on iOS prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106350 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106349 (Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106348 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106347 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106346 (Improper state validation in DevTools in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106345 (Use of released resource in Session in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106344 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106343 (Improper state validation in Autofill AI in Google Chrome on on Androi ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106342 (Information leak in Autofill in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106341 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106340 (Missing authorization in CredentialProvider in Google Chrome on on Win ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106339 (Use of released resource in Core in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106338 (UI misrepresentation in PictureInPicture in Google Chrome on on Androi ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106337 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106336 (Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106335 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106334 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106333 (Incorrect authorization in Input in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106332 (Integer overflow in Compositing in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106331 (Improper input validation in Extensions in Google Chrome prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106330 (Information leak in Paint in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106329 (Incorrect authorization in FileSystem in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106328 (Incorrect authorization in PDF in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106327 (Incorrect authorization in Core in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106326 (Confused deputy in UI in Google Chrome on on Android prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106325 (Incorrect reference resolution in Core in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106324 (Incorrect authorization in WebAppInstalls in Google Chrome on on Andro ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106323 (Missing authorization in Chrome for iOS in Google Chrome on on iOS pri ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106322 (Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106321 (Information leak in Editing in Google Chrome prior to 155.0.8059.39 al ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106320 (Use of released resource in UI in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106318 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106317 (UI misrepresentation in FullScreen in Google Chrome on on Android prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106316 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106315 (Use after free in Modularization in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106314 (Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106313 (Incorrect authorization in Browser in Google Chrome on on Android prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106312 (Missing authorization in SignIn in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106311 (Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106310 (Use of released resource in FontAccess in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106309 (Incorrect authorization in Selection in Google Chrome on on iOS prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106308 (Incorrect reference resolution in Autofill in Google Chrome on on Andr ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106307 (Incorrect authorization in Network in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106306 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106305 (UI misrepresentation in Mobile in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106304 (Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 al ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106303 (Observable discrepancy in Autofill AI in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106302 (UI misrepresentation in PermissionElement in Google Chrome prior to 15 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106301 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106300 (Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106299 (Improper input validation in WebAudio in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106298 (Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106297 (Incorrect authorization in Scheduling in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106296 (Improper privilege management in UI in Google Chrome on on Mac prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106295 (Incorrect authorization in Unbounded Element in Google Chrome prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106294 (Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 1 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106293 (Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106292 (Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106291 (Use after free in GarbageCollection in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106290 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106289 (Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106288 (Missing authorization in Browser in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106287 (Information loss in CORS in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106286 (Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106285 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106284 (Out of bounds read in Printing in Google Chrome on on Windows prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106283 (Use after free in Streaming in Google Chrome prior to 155.0.8059.39 al ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106282 (UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106281 (Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106280 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106279 (Incorrect reference resolution in Passwords in Google Chrome on on iOS ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106278 (Use after free in Select in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106277 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106276 (UI misrepresentation in Payments in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106275 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106274 (Incorrect reference resolution in Browser in Google Chrome on on Mac p ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106273 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106272 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106271 (Missing authorization in Workers in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106270 (Incorrect authorization in WebAppInstalls in Google Chrome prior to 15 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106269 (Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106268 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106267 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106266 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106265 (UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106264 (Missing authorization in Web Authentication (Passkeys & Security Keys) ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106263 (Improper input validation in SignIn in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106262 (Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106261 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106260 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106259 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106258 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106257 (Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106256 (Information leak in Passwords in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106255 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106254 (Information leak in Mobile in Google Chrome on on Android prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106253 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106252 (Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106251 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106250 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106249 (Incorrect authorization in Autofill in Google Chrome on on Android pri ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106248 (Use after free in Bindings in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106247 (Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106246 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106245 (Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106244 (Incorrect authorization in Permissions in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106243 (Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106242 (Information leak in Omnibox in Google Chrome on on Android prior to 15 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106241 (Incorrect authorization in Search in Google Chrome on on Android prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106240 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106239 (Integer overflow in WebGL in Google Chrome on on Android prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106238 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106237 (Information leak in Permissions in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106236 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106235 (Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106234 (Use after free in Network in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106233 (Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106232 (UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106231 (Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106230 (Incorrect reference resolution in Offline in Google Chrome on on Andro ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106229 (UI misrepresentation in FileSystem in Google Chrome prior to 155.0.805 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106228 (Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106227 (Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106226 (Improper input validation in Compositing in Google Chrome prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106225 (Missing authorization in Autofill in Google Chrome prior to 155.0.8059 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106224 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106223 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106222 (Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106221 (Confused deputy in WebAPKs in Google Chrome on on Android prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106220 (Information leak in Passwords in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106219 (In JetBrains TeamCity before 2026.2.1 missing validation of Git submod ...)
NOT-FOR-US: JetBrains
CVE-2026-106218 (In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox esc ...)
NOT-FOR-US: JetBrains
CVE-2026-106217 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106216 (Cross-site request forgery in ReadingList in Google Chrome on on Andro ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106215 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106214 (Information leak in Proxy in Google Chrome on on Windows prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106213 (Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106212 (Incorrect authorization in Autofill in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106211 (Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 all ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106210 (Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106209 (UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106208 (Missing authorization in API in Google Chrome prior to 155.0.8059.39 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106207 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106206 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106205 (Missing authorization in Passwords in Google Chrome on on Android prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106204 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106203 (Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106202 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106201 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106200 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106199 (Incorrect authorization in Actor in Google Chrome on on Android prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106198 (Missing authorization in FileSystem in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106197 (Use after free in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106196 (Missing authorization in Navigation in Google Chrome on on iOS prior t ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106195 (Incorrect authorization in Chromoting in Google Chrome on on Mac prior ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106194 (Missing authorization in WebAppInstalls in Google Chrome prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106193 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106192 (Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106191 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106190 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106189 (Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106188 (Confused deputy in SignIn in Google Chrome on on Android prior to 155. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106187 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106186 (Uncontrolled search path element in CredentialProvider in Google Chrom ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106185 (Improper input validation in Viz in Google Chrome prior to 155.0.8059. ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106184 (Uninitialized resource in Media in Google Chrome prior to 155.0.8059.3 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106183 (Missing authorization in Chromoting in Google Chrome on on Windows pri ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106182 (UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106181 (Incorrect reference resolution in DevTools in Google Chrome prior to 1 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106180 (Observable discrepancy in Animation in Google Chrome prior to 155.0.80 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106179 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-106123 (The RabbitMQ Java client library allows Java and JVM-based application ...)
- rabbitmq-java-client <unfixed> (bug #1150244)
@@ -8398,7 +9286,7 @@ CVE-2026-102915 (Subscriber Broken Access Control in WPO365 <= 44.1 versions.)
CVE-2026-102387 (Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 v ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-102322 (Incorrect Authorization in SiteIsolation in Google Chrome prior to 155 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-101207 (Dell OpenManage Integration with Microsoft Windows Admin Center, versi ...)
NOT-FOR-US: Dell / EMC
@@ -11419,39 +12307,39 @@ CVE-2026-103762 (SiYuan before v3.8.5 contains a missing authorization vulnerabi
CVE-2026-103648 (Path traversal in image-downloader 4.3.0 allows an attacker who can co ...)
NOT-FOR-US: image-downloader
CVE-2026-103631 (Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allo ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allow ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103627 (Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowe ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103626 (Incorrect authorization in FileSystem in Google Chrome on on Windows p ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103625 (Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103624 (Use after free in Contextual Tasks in Google Chrome on on Windows prio ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103623 (Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103622 (Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103621 (Integer overflow in Compositing in Google Chrome prior to 154.0.8037.9 ...)
- {DSA-6553-1}
+ {DSA-6553-1 DLA-4833-1}
- chromium 155.0.8059.39-1
CVE-2026-103604 (Inefficient algorithmic complexity in X.509 distinguished name string ...)
NOT-FOR-US: Bouncycastle components not packaged in Debian
@@ -11838,7 +12726,7 @@ CVE-2026-100251 (Wormhole.app as deployed before 2026-08-22 misconfigures the co
NOT-FOR-US: Wormhole.app
CVE-2025-71427 (Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal v ...)
NOT-FOR-US: Office-PowerPoint-MCP-Server
-CVE-2026-94603
+CVE-2026-94603 (Podman is a tool for managing OCI containers and pods. From 4.4.0 unti ...)
- podman 5.8.6+ds1-3 (bug #1149955)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2542566
NOTE: https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
@@ -12365,7 +13253,7 @@ CVE-2025-31980 (HCL BigFix Service Management is affected by an Improper Input V
NOT-FOR-US: HCL
CVE-2024-58388 (Sharp (and Toshiba Tec rebranded) multifunction printers contain an un ...)
NOT-FOR-US: Sharp printers
-CVE-2023-54404 (Zod schema-validation library through 4.6.5 contains an uncontrolled r ...)
+CVE-2023-54404 (Zod schema-validation library through 4.6.5, fixed in commit e06a510, ...)
NOT-FOR-US: Zod
CVE-2026-42356 (Deployment of wrong handler vulnerability in Apache HTTP Server allows ...)
- apache2 2.4.69-1
@@ -17942,11 +18830,11 @@ CVE-2026-78424 (Improper parameter handling in NeuVector allows any authenticate
NOT-FOR-US: NeuVector
CVE-2026-75600 (FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticat ...)
NOT-FOR-US: FreePBX
-CVE-2026-73642 (Dayforce Payroll is vulnerable to Path Traversal in file download func ...)
+CVE-2026-73642 (Dayforce ESS Excelity is vulnerable to Path Traversal in file download ...)
NOT-FOR-US: Dayforce Payroll
-CVE-2026-73641 (Dayforce Payroll is vulnerable to Reflected XSS in multiple endpoints. ...)
+CVE-2026-73641 (Dayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpo ...)
NOT-FOR-US: Dayforce Payroll
-CVE-2026-73640 (Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in pa ...)
+CVE-2026-73640 (Dayforce ESS Excelity is vulnerable to Time Based-Blind SQL Injection ...)
NOT-FOR-US: Dayforce Payroll
CVE-2026-70413 (Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) ...)
NOT-FOR-US: Dell / EMC
@@ -26573,9 +27461,11 @@ CVE-2026-94492 (A security vulnerability has been detected in Yonyou U8cloud 5.x
NOT-FOR-US: Yonyou U8cloud
CVE-2026-94491 (A weakness has been identified in Yonyou KSOA 9.0. This affects an unk ...)
NOT-FOR-US: Yonyou KSOA
-CVE-2026-94490 (A security flaw has been discovered in OctoPrint 1.0.0. Affected by th ...)
+CVE-2026-94490
+ REJECTED
- octoprint <itp> (bug #718591)
-CVE-2026-94489 (A vulnerability was identified in OctoPrint 1.0.0. Affected by this vu ...)
+CVE-2026-94489
+ REJECTED
- octoprint <itp> (bug #718591)
CVE-2026-94488 (Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The fi ...)
- telegram-desktop <unfixed> (bug #1150329)
@@ -33032,7 +33922,7 @@ CVE-2026-XXXX [SQUID-2026:7]
CVE-2026-62846 [SQUID-2026:9]
- squid 7.7-1
TODO: check SQUID-2026:9 information not yet public
-CVE-2026-61642 [SQUID-2026:6]
+CVE-2026-61642 (Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due ...)
- squid 7.6-1
NOTE: https://github.com/squid-cache/squid/security/advisories/GHSA-537g-4gfh-w7m6
NOTE: Fixed by: https://github.com/squid-cache/squid/commit/d06f48de8b8cc9a378cb91ecfe8e89b6e81696d2 (SQUID_7_6)
@@ -40578,7 +41468,7 @@ CVE-2026-90461 (OpenStack Ironic through 38.0.0 may send a username and password
NOTE: https://bugs.launchpad.net/ironic/+bug/2162816
NOTE: https://docs.openstack.org/security-notes/OSSN-0110.html
CVE-2026-90460 (An issue was discovered in OpenStack Keystone before 29.0.3. Tokens ob ...)
- {DSA-6554-1}
+ {DSA-6554-1 DLA-4834-1}
- keystone 2:30.0.0~rc1-1 (bug #1149956; bug #1149303)
NOTE: https://bugs.launchpad.net/keystone/+bug/2159643
NOTE: https://bugs.launchpad.net/keystone/+bug/2158931
@@ -60738,7 +61628,7 @@ CVE-2026-51106 (An issue in TokTok qTox v1.18.4 allows a local attacker to cause
CVE-2026-48786 (Fleet is an open-source device management platform built on osquery. I ...)
NOT-FOR-US: Fleet
CVE-2026-48549 (Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSR ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1145888)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/02aba584656eb10c2ff83a696b166f4bc7dd1304 (nagios-4.5.13)
CVE-2026-48548 (Nagios Core before 4.5.12 contains a cross-site request forgery vulner ...)
@@ -81085,23 +81975,23 @@ CVE-2026-49349 (regclient is a Docker and OCI Registry Client in Go. Prior to ve
CVE-2026-49262 (In the Aimeos Pagible content management system prior to version 0.10. ...)
NOT-FOR-US: Aimeos Pagible content management system
CVE-2026-48554 (Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1144495)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/1d1f65390dae0bdff05da4ccba4b2db58c0f0d8e (nagios-4.5.14)
CVE-2026-48553 (Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1144495)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/0b68220529d461c9fba198a904049ea332bdb1da (nagios-4.5.13)
CVE-2026-48552 (Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1144495)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/acd2365e816dda4a8dce61709f8d3a3b4ab04a6f (nagios-4.5.14)
CVE-2026-48551 (Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cros ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1144495)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/bcd4c2a4b5dfe51bdb2b227af8945ad8751a820d (nagios-4.5.14)
CVE-2026-48550 (Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ...)
- {DSA-6556-1}
+ {DSA-6556-1 DLA-4832-1}
- nagios4 4.5.14+ds-1 (bug #1144495)
NOTE: Fixed by: https://github.com/NagiosEnterprises/nagioscore/commit/acd2365e816dda4a8dce61709f8d3a3b4ab04a6f (nagios-4.5.14)
CVE-2026-47234 (Admidio is an open-source user management solution. Prior to version 5 ...)
@@ -153433,7 +154323,8 @@ CVE-2026-22554 (A heap-based buffer overflow vulnerability exists in the Channel
NOT-FOR-US: MediaInfoLib
CVE-2026-22315
REJECTED
-CVE-2026-22314 (Vendor disputed record. The reported behaviour is documented administ ...)
+CVE-2026-22314
+ REJECTED
NOT-FOR-US: Meona
CVE-2026-21836 (The HCL DominoIQ RAG feature isaffected bya Broken Access Control vuln ...)
NOT-FOR-US: HCL
@@ -716445,7 +717336,7 @@ CVE-2020-12813
RESERVED
CVE-2020-12812 (An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, ...)
NOT-FOR-US: Fortinet
-CVE-2020-12811 (An improper neutralization of script-related HTML tags in a web page i ...)
+CVE-2020-12811 (A improper neutralization of script-related html tags in a web page (b ...)
NOT-FOR-US: FortiGuard
CVE-2020-12810
RESERVED
@@ -727149,13 +728040,13 @@ CVE-2020-9292 (An unquoted service path vulnerability in the FortiSIEM Windows A
NOT-FOR-US: Fortiguard
CVE-2020-9291 (An Insecure Temporary File vulnerability in FortiClient for Windows 6. ...)
NOT-FOR-US: Fortiguard / FortiClient for Windows
-CVE-2020-9290 (An Unsafe Search Path vulnerability in FortiClient for Windows online ...)
+CVE-2020-9290 (A untrusted search path vulnerability in Fortinet may allow attacker ...)
NOT-FOR-US: Fortiguard
CVE-2020-9289 (Use of a hard-coded cryptographic key to encrypt password data in CLI ...)
NOT-FOR-US: Fortiguard
CVE-2020-9288 (An improper neutralization of input vulnerability in FortiWLC 8.5.1 al ...)
NOT-FOR-US: Fortinet
-CVE-2020-9287 (An Unsafe Search Path vulnerability in FortiClient EMS online installe ...)
+CVE-2020-9287 (A untrusted search path vulnerability in Fortinet may allow attacker ...)
NOT-FOR-US: Fortiguard
CVE-2020-9286 (An improper authorization vulnerability in FortiADC may allow a remote ...)
NOT-FOR-US: Fortiguard
@@ -792728,7 +793619,7 @@ CVE-2019-5591 (A Default Configuration vulnerability in FortiOS may allow an una
NOT-FOR-US: Fortinet
CVE-2019-5590 (The URL part of the report message is not encoded in Fortinet FortiWeb ...)
NOT-FOR-US: Fortinet
-CVE-2019-5589 (An Unsafe Search Path vulnerability in FortiClient Online Installer (W ...)
+CVE-2019-5589 (A untrusted search path vulnerability in Fortinet may allow attacker ...)
NOT-FOR-US: FortiGuard
CVE-2019-5588 (A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet Forti ...)
NOT-FOR-US: Fortinet FortiOS
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa7f41e9f62c99d0f2e8c8695966f27440e82cc3
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa7f41e9f62c99d0f2e8c8695966f27440e82cc3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/5b6d5246/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list