Complete feed
Security advisories & CVEs
1332 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2026-19147] Sandbox escape via use-after-free vulnerability in Aura
Sandbox escape via use-after-free vulnerability in Aura. Red Hat rates this important (CVSS 8.2). Weakness: CWE-787.
High [CVE-2026-19145] Arbitrary code execution via use-after-free in Translate component
Arbitrary code execution via use-after-free in Translate component. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-19144] Arbitrary code execution via crafted HTML page
Arbitrary code execution via crafted HTML page. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-19142] Remote code execution via use after free in Views
Remote code execution via use after free in Views. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-19143] Google Chrome on Android: Sandbox escape via malicious WebAPK input
Google Chrome on Android: Sandbox escape via malicious WebAPK input. Red Hat rates this important (CVSS 8.2). Weakness: CWE-1286.
High [CVE-2026-19140] Sandbox escape via use after free vulnerability in crafted HTML.
Sandbox escape via use after free vulnerability in crafted HTML. Red Hat rates this important (CVSS 8.2). Weakness: CWE-825.
High [CVE-2026-19141] Sandbox escape due to use-after-free vulnerability
Sandbox escape due to use-after-free vulnerability. Red Hat rates this important (CVSS 8.2). Weakness: CWE-825.
High [CVE-2026-19138] Sandbox escape via heap buffer overflow in CrashReporting
Sandbox escape via heap buffer overflow in CrashReporting. Red Hat rates this important (CVSS 8.3). Weakness: CWE-120.
High [CVE-2026-19168] Arbitrary Code Execution via crafted HTML page
Arbitrary Code Execution via crafted HTML page. Red Hat rates this important (CVSS 8.8). Weakness: CWE-823.
High [CVE-2026-19169] Privilege escalation via crafted HTML page in Contextual Tasks
Privilege escalation via crafted HTML page in Contextual Tasks. Red Hat rates this important (CVSS 8.3). Weakness: CWE-79.
High [CVE-2026-19172] Sandbox escape via use after free in Views
Sandbox escape via use after free in Views. Red Hat rates this important (CVSS 8.2). Weakness: CWE-825.
High [CVE-2026-19170] Sandbox escape via use after free in WebGL
Sandbox escape via use after free in WebGL. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-19157] Sandbox escape via out-of-bounds write in Google Chrome on Android
Sandbox escape via out-of-bounds write in Google Chrome on Android. Red Hat rates this important (CVSS 8.4). Weakness: CWE-787.
High [CVE-2026-19149] Sandbox escape via use-after-free vulnerability in Aura
Sandbox escape via use-after-free vulnerability in Aura. Red Hat rates this important (CVSS 8.3). Weakness: CWE-825.
High [CVE-2026-67422] Denial of Service via Regular Expression Vulnerability
Denial of Service via Regular Expression Vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Hardened Images; Self-service automation portal 2.
High [CVE-2026-66808] unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection)
unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection). Red Hat rates this important (CVSS 8.7). Weakness: CWE-88. Red Hat lists fixing advisory RHSA-2026:54432 with package multicluster-engine/hypershift-addon-rhel9-operator:1786912006, multicluster-engine/hypershift-addon-rhel9-operator:1786548381, multicluster-engine/hypershift-addon-rhel9-operator:1787259113, multicluster-engine/hypershift-addon-rhel9-operator:1787264068. Affected product named by the advisory: Multicluster Engine for Kubernetes.
High [CVE-2026-71436] Denial of Service via invalid X-Axis parameters
Denial of Service via invalid X-Axis parameters. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
High [CVE-2026-71327] Cross-namespace backend hijacking due to Gateway API identity collision
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and service identities by hyphen-concatenating namespace, route name, Gateway identity, entry point, and rule index, allowing colliding Routes to overwrite another namespace's backend. This issue is fixed in 3.6.25 and 3.7.10. Its Kubernetes Gateway API provider incorrectly generates unique identifiers for routes and services. This vulnerability allows an attacker to create conflicting routes, which can then overwrite the backend services of another isolated environment (namespace). This could lead to unauthorized control over services in different namespaces. A flaw in Traefik's Kubernetes Gateway API provider allows a lower-privileged tenant to overwrite backend routing rules across namespace boundaries. Due to deterministic route identity generation concatenating namespace, route name, Gateway identity, entry point, and rule index using hyphens, identical generated string identifiers result in name collisions. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
High [CVE-2026-71325] Namespace isolation bypass via TraefikService backendRef
Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are not rejected for TraefikService backend references resolved by the service resolver. A tenant confined by RBAC to a single namespace can therefore bind its own router to a TraefikService owned by another namespace and expose or reroute that namespace's backend, defeating the namespace isolation allowCrossNamespace=false is meant to enforce. This issue is fixed in version 2.11.54, 3.6.25, 3.7.10. A flaw was found in Traefik. This flaw allows a tenant, even when restricted by Role-Based Access Control (RBAC) to a single namespace, to bypass namespace isolation. This defeats the intended `allowCrossNamespace=false` enforcement, leading to unauthorized access or manipulation of services across namespaces. A flaw in Traefik's service resolver allows a lower-privileged tenant to reference and bind cross-namespace TraefikService objects via @kubernetescrd, even when allowCrossNamespace=false is configured. By creating a custom router targeting an isolated TraefikService CRD in a separate namespace, an authenticated attacker can bypass namespace isolation controls, intercepting or rerouting backend service traffic across multi-tenant boundaries.
High [CVE-2026-43632] Potential code execution via a race condition in tokenization endpoints
Potential code execution via a race condition in tokenization endpoints. Red Hat rates this important (CVSS 8.1). Weakness: CWE-364.