Complete feed
No mitigation yet
No fix, workaround or mitigation extracted yet
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Critical [CVE-2026-56854] Authentication bypass due to unenforced source-address restrictions
A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. This oversight could allow a remote attacker to bypass intended network-based access controls, potentially leading to unauthorized access to services utilizing the affected component. Red Hat severity: Critical — CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Weakness: CWE-346.
Critical [CVE-2026-79269] Web origin policy bypass via uninitialized resource in ANGLE
Web origin policy bypass via uninitialized resource in ANGLE. Red Hat rates this critical (CVSS 9.3). Weakness: CWE-824.
Critical [CVE-2026-76018] Arbitrary Code Execution via crafted file in Import component
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by tricking a user into processing a specially crafted file. Red Hat does not ship Google Chrome or Chromium as part of any supported Red Hat product. Chromium is available through EPEL, which is community-maintained and outside Red Hat's production support scope. Electron is shipped in some Red Hat products (podman-desktop, RHEL 10), but the affected Import component is Chrome browser-specific UI functionality not present in Electron's embedded Chromium engine. Red Hat severity: Important — CVSS 9.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Weakness: CWE-641.
Critical [CVE-2026-76044] Arbitrary code execution due to a race condition in USB
Arbitrary code execution due to a race condition in USB. Red Hat rates this important (CVSS 9). Weakness: CWE-368.
Critical [CVE-2026-68457] use opener credentials for FSCTL mutations
use opener credentials for FSCTL mutations. Red Hat rates this important (CVSS 9.1). Weakness: CWE-270. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Critical [CVE-2026-19173] Sandbox escape via out-of-bounds write in Chromium
Sandbox escape via out-of-bounds write in Chromium. Red Hat rates this important (CVSS 9). Weakness: CWE-787.
Critical [CVE-2026-19137] Google Chrome on Android: Sandbox escape via use after free in WebGL
Google Chrome on Android: Sandbox escape via use after free in WebGL. Red Hat rates this important (CVSS 9). Weakness: CWE-825.
Critical [CVE-2026-5134] Loca Software Informatics Technology Ltd. Co. CMS: CMS: Critical SQL Injection vulnerability
Loca Software Informatics Technology Ltd. Co. CMS: CMS: Critical SQL Injection vulnerability. Red Hat rates this critical (CVSS 9.8). Weakness: CWE-89.
Critical [CVE-2026-68579] Arbitrary Code Execution via Heap Overflow in Clipboard Processing
Arbitrary Code Execution via Heap Overflow in Clipboard Processing. Red Hat rates this critical (CVSS 9.6). Weakness: CWE-787.
Critical [CVE-2026-17566] pgAdmin 4: pgAdmin 4: Remote Code Execution via backslash-escape mismatch in Import/Export Data tool
pgAdmin 4: pgAdmin 4: Remote Code Execution via backslash-escape mismatch in Import/Export Data tool. Red Hat rates this critical (CVSS 9.9). Weakness: CWE-78.
Critical [CVE-2026-17349] pgAdmin 4: Unauthorized database credential access via adhoc server cloning
pgAdmin 4: Unauthorized database credential access via adhoc server cloning. Red Hat rates this critical (CVSS 9.6). Weakness: CWE-639.
Critical [CVE-2026-18363] Account compromise via password reset token bypass
Account compromise via password reset token bypass. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-640.
Critical [CVE-2026-44092] Integrity and availability loss via malicious MQTT input injection
Integrity and availability loss via malicious MQTT input injection. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-94.
Critical [CVE-2026-17893] Insufficient validation of untrusted input in Updater
Insufficient validation of untrusted input in Updater. Red Hat rates this moderate (CVSS 9). Weakness: CWE-1286.
Critical [CVE-2026-17890] Insufficient validation of untrusted input in DevTools
Insufficient validation of untrusted input in DevTools. Red Hat rates this moderate (CVSS 9). Weakness: CWE-1286.
Critical [CVE-2026-17848] Insufficient validation of untrusted input in Codecs
Insufficient validation of untrusted input in Codecs. Red Hat rates this moderate (CVSS 9.6). Weakness: CWE-190.
Critical [CVE-2026-17850] Inappropriate implementation in Permissions
Inappropriate implementation in Permissions. Red Hat rates this moderate (CVSS 9.3). Weakness: CWE-346.
Critical [CVE-2026-17832] Use after free in ANGLE
Use after free in ANGLE. Red Hat rates this moderate (CVSS 9). Weakness: CWE-825.
Critical [CVE-2026-17811] Use after free in ANGLE
Use after free in ANGLE. Red Hat rates this moderate (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-17806] Insufficient validation of untrusted input in Extensions
Insufficient validation of untrusted input in Extensions. Red Hat rates this moderate (CVSS 9). Weakness: CWE-1289.