Complete feed
Security advisories & CVEs
7850 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-74957] Mitigation bypass in the Safe Browsing component
Mitigation bypass in the Safe Browsing component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-807. Red Hat lists fixing advisory RHSA-2026:58897 with package firefox-0:140.14.0-1.el10_2, firefox-0:140.14.0-1.el8_10, firefox-0:140.14.0-1.el9_8. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-74953] Privilege escalation in the Networking: Cookies component
Privilege escalation in the Networking: Cookies component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-472. Red Hat lists fixing advisory RHSA-2026:58897 with package firefox-0:140.14.0-1.el10_2, firefox-0:140.14.0-1.el8_10, firefox-0:140.14.0-1.el9_8. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-19608] Name-only group claims let same-name groups satisfy path-specific group policies
Name-only group claims let same-name groups satisfy path-specific group policies. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-285. Affected product named by the advisory: Red Hat Build of Keycloak.
Medium [CVE-2026-61308] Enhance HTTP Connections (2026-08 Security Update)
Enhance HTTP Connections (2026-08 Security Update). Red Hat rates this moderate (CVSS 6.8). Red Hat lists fixing advisory RHSA-2026:55788 with package java-21-openjdk-portable-main-21.0.12.1.1-0.1.hum1, java-25-openjdk-1:25.0.4.1.1-1.1.el9, java-25-openjdk-windows, java-25-openjdk-main-25.0.4.1.1-1.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8.
Medium [CVE-2026-70907] Enhance TLS server (2026-08 Security Update)
Enhance TLS server (2026-08 Security Update). Red Hat rates this moderate (CVSS 5.3). Red Hat lists fixing advisory RHSA-2026:55788 with package java-21-openjdk-portable-main-21.0.12.1.1-0.1.hum1, java-25-openjdk-1:25.0.4.1.1-1.1.el9, java-25-openjdk-windows, java-25-openjdk-main-25.0.4.1.1-1.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8.
Low [CVE-2026-63632] Denial of Service via out-of-bounds read in version converter
Denial of Service via out-of-bounds read in version converter. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Low [CVE-2026-74985] Privilege escalation in the Enterprise Policies component
Privilege escalation in the Enterprise Policies component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-266.
Low [CVE-2026-74986] Site isolation issue in the CSS Parsing and Computation component
Site isolation issue in the CSS Parsing and Computation component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-501.
Low [CVE-2026-74984] Race condition in the JavaScript Engine component
Race condition in the JavaScript Engine component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-366.
Low [CVE-2026-74981] Site isolation issue in the Audio/Video: Web Codecs component
Site isolation issue in the Audio/Video: Web Codecs component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-501.
Low [CVE-2026-74980] Clickjacking issue in the Downloads component in Firefox for Android
Clickjacking issue in the Downloads component in Firefox for Android. Red Hat rates this low (CVSS 3.4). Weakness: CWE-1021.
Low [CVE-2026-74982] Denial-of-service in the Widget component
Denial-of-service in the Widget component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-770.
Low [CVE-2026-74977] Integer overflow in the Graphics component
Integer overflow in the Graphics component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-190.
Low [CVE-2026-74978] Clickjacking issue in the Widget component
Clickjacking issue in the Widget component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-1021.
Low [CVE-2026-74979] Mitigation bypass in the Add-ons Manager component
Mitigation bypass in the Add-ons Manager component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-807.
Low [CVE-2026-74975] Spoofing issue in the Downloads component in Firefox for Android
Spoofing issue in the Downloads component in Firefox for Android. Red Hat rates this low (CVSS 3.4). Weakness: CWE-494.
Low [CVE-2026-74983] Mitigation bypass in the Data Loss Prevention component
Mitigation bypass in the Data Loss Prevention component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-807. Red Hat lists fixing advisory RHSA-2026:58897 with package firefox-0:140.14.0-1.el10_2, firefox-0:140.14.0-1.el8_10, firefox-0:140.14.0-1.el9_8. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Low [CVE-2026-74976] JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-733. Red Hat lists fixing advisory RHSA-2026:58897 with package firefox-0:140.14.0-1.el10_2, firefox-0:140.14.0-1.el8_10, firefox-0:140.14.0-1.el9_8. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Low [CVE-2026-23938] Denial of Service via crafted JavaScript scripts
Denial of Service via crafted JavaScript scripts. Red Hat rates this low (CVSS 2.7). Weakness: CWE-770.
Low [CVE-2026-60589] Improve Resource Resolving (2026-08 Security Update)
Improve Resource Resolving (2026-08 Security Update). Red Hat rates this moderate (CVSS 3.7). Red Hat lists fixing advisory RHSA-2026:55788 with package java-21-openjdk-portable-main-21.0.12.1.1-0.1.hum1, java-25-openjdk-1:25.0.4.1.1-1.1.el9, java-25-openjdk-windows, java-25-openjdk-main-25.0.4.1.1-1.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8.