Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.6 CVE-2026-42014

Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pin_CVE-2026-42014

A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vu...

Red Hat Red Hat Enterprise Linux 10 0:3.8.10-4.el10_2 CVE
MEDIUM 5.6 CVE-2026-1767

Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags_CVE-2026-1767

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker cou...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 5.6 CVE-2026-1766

Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files._CVE-2026-1766

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. Th...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 5.6 CVE-2026-1765

Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 files_CVE-2026-1765

A flaw was found in the `tracker-extract-mp3` component of GNOME localsearch (previously known as tracker-miners). This vulnerability, a heap buffe...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 5.6 CVE-2026-1764

Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files_CVE-2026-1764

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 5.4 MS:CVE-2026-11666

Chromium: CVE-2026-11665 Out of bounds read in Dawn_MS:CVE-2026-11666

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
MEDIUM 5.3 MS:CVE-2026-11669

Chromium: CVE-2026-11668 Uninitialized Use in Codecs_MS:CVE-2026-11669

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
MEDIUM 4.3 MS:CVE-2026-11685

Chromium: CVE-2026-11684 Insufficient policy enforcement in Network_MS:CVE-2026-11685

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
MEDIUM 4.3 MS:CVE-2026-11686

Chromium: CVE-2026-11685 Insufficient data validation in MediaCapture_MS:CVE-2026-11686

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
MEDIUM 5.3 MS:CVE-2026-11696

Chromium: CVE-2026-11695 Inappropriate implementation in Passwords_MS:CVE-2026-11696

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE