{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability","@odata.count":31775,"value":[{"id":"00000000-0000-0000-0000-000089716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118359","cveTitle":"Chromium: CVE-2026-118359 Memory corruption in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118359","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118359","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118359","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"67fca134-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-000088716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118358","cveTitle":"Chromium: CVE-2026-118358 Memory corruption in WebAudio","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118358","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118358","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118358","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"d5560b2e-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-00008d716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118355","cveTitle":"Chromium: CVE-2026-118355 Improper input validation in Command","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118355","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118355","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118355","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"08ff0f28-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-000093716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118353","cveTitle":"Chromium: CVE-2026-118353 Use after free in Paint","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118353","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118353","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118353","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"99b88f21-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-000092716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118352","cveTitle":"Chromium: CVE-2026-118352 Memory corruption in Cache","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118352","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118352","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118352","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"28d10e1b-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f3fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118346","cveTitle":"Chromium: CVE-2026-118346 Use after free in Compositing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118346","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118346","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118346","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"98d40106-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f4fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118347","cveTitle":"Chromium: CVE-2026-118347 Use after free in FileSystem","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118347","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118347","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118347","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"a67bb60c-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000edfcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118348","cveTitle":"Chromium: CVE-2026-118348 Improper input validation in Skia","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118348","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118348","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118348","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"c37bb60c-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-000091716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118351","cveTitle":"Chromium: CVE-2026-118351 Memory corruption in Skia","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118351","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118351","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118351","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"19d10e1b-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f2fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118345","cveTitle":"Chromium: CVE-2026-118345 Use after free in PDFium","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118345","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118345","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118345","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"68b396ff-f3d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f8fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118343","cveTitle":"Chromium: CVE-2026-118343 Improper input validation in ReadingList","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118343","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118343","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118343","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"88782bf9-f3d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f1fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118344","cveTitle":"Chromium: CVE-2026-118344 Use after free in Layout","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118344","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118344","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118344","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"56b396ff-f3d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000f7fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118342","cveTitle":"Chromium: CVE-2026-118342 Out of bounds write in Editing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118342","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118342","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118342","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"34782bf9-f3d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000bf5ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118339","cveTitle":"Chromium: CVE-2026-118339 Use after free in Animation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118339","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118339","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118339","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"f6effcc8-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000f6fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118341","cveTitle":"Chromium: CVE-2026-118341 Use after free in Modularization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118341","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118341","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118341","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"00e467cf-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000f5fcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118340","cveTitle":"Chromium: CVE-2026-118340 Memory corruption in Skia","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118340","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118340","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118340","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"eae367cf-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000be5ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118338","cveTitle":"Chromium: CVE-2026-118338 Use after free in Animation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118338","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118338","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118338","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"dceffcc8-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000c55ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118337","cveTitle":"Chromium: CVE-2026-118337 Improper access control in Forms","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118337","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118337","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118337","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"1dedfdc2-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000c45ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118336","cveTitle":"Chromium: CVE-2026-118336 Improper input validation in Headless","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118336","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118336","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118336","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"0fedfdc2-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000c35ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118335","cveTitle":"Chromium: CVE-2026-118335 Improper input validation in Metrics","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118335","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118335","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118335","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"2cf5e4bb-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-000024e60ec6","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118329","cveTitle":"Chromium: CVE-2026-118329 Improper input validation in ANGLE","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118329","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118329","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118329","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"b7fea90c-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000090716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118350","cveTitle":"Chromium: CVE-2026-118350 Use after free in Turbolev","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118350","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118350","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118350","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"585d9613-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-00008c716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118354","cveTitle":"Chromium: CVE-2026-118354 Improper input validation in Skia","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118354","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118354","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118354","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"abb88f21-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-00008e716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118356","cveTitle":"Chromium: CVE-2026-118356 Use after free in WTF","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118356","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118356","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118356","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"22ff0f28-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-00008f716723","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118357","cveTitle":"Chromium: CVE-2026-118357 Use after free in FileSystem","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118357","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118357","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118357","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"c4560b2e-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-0000eefcbf80","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118349","cveTitle":"Chromium: CVE-2026-118349 Memory corruption in Payments","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118349","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118349","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118349","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"475d9613-f4d3-f111-a059-6045bd0a04e8"}]},{"id":"00000000-0000-0000-0000-000040f3729e","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-91732","cveTitle":"Chromium CVE-2026-91732: Missing authorization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-862: Missing Authorization"],"cweDetailsListForSearch":["cwe: CWE-862: Missing Authorization","cweUrl: https://cwe.mitre.org/data/definitions/862.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-91732","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-91732","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.1","temporalScore":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-862: Missing Authorization","https://cwe.mitre.org/data/definitions/862.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-91732","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"b1f6a355-4dd2-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c75ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118331","cveTitle":"Chromium: CVE-2026-118331 Improper input validation in FileAPI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118331","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118331","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118331","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"91c2b419-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c95ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118333","cveTitle":"Chromium: CVE-2026-118333 Missing authorization in Video","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118333","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118333","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118333","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"7b4fdb21-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c65ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118330","cveTitle":"Chromium: CVE-2026-118330 Use after free in Browser","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118330","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118330","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118330","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"8d47a512-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c25ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118334","cveTitle":"Chromium: CVE-2026-118334 Use after free in ImageCapture","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118334","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118334","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118334","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"b394d4b5-f2d3-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-00002ae60ec6","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118327","cveTitle":"Chromium: CVE-2026-118327 Memory corruption in Media","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118327","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118327","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118327","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"b3b7ed05-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00002be60ec6","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118320","cveTitle":"Chromium: CVE-2026-118320 Memory corruption in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118320","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118320","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118320","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"1cc1d8ff-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c85ab668","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118332","cveTitle":"Chromium: CVE-2026-118332 Improper input validation in Compositing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118332","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118332","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118332","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"a5c2b419-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000023e60ec6","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118328","cveTitle":"Chromium: CVE-2026-118328 Improper input validation in WebRTC","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118328","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118328","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118328","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"a6fea90c-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00002de60ec6","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118322","cveTitle":"Chromium: CVE-2026-118322 Memory corruption in ANGLE","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118322","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118322","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118322","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"90b7ed05-f2d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f54305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118319","cveTitle":"Chromium: CVE-2026-118319 Memory corruption in Skia","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118319","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118319","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118319","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"af93c3f9-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00005fcf5d0b","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118306","cveTitle":"Chromium: CVE-2026-118306 Memory corruption in FileSystem","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118306","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118306","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118306","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"d82ee5d8-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000060cf5d0b","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118307","cveTitle":"Chromium: CVE-2026-118307 Use after free in Paint","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118307","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118307","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118307","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"e82ee5d8-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000fc4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118310","cveTitle":"Chromium: CVE-2026-118310 Improper input validation in Views","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118310","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118310","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118310","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"2d03f2de-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00005ecf5d0b","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118305","cveTitle":"Chromium: CVE-2026-118305 Memory corruption in Turbolev","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118305","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118305","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118305","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"dd46ded2-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000059cf5d0b","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118308","cveTitle":"Chromium: CVE-2026-118308 Use after free in SVG","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118308","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118308","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118308","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"1b03f2de-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f44305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118318","cveTitle":"Chromium: CVE-2026-118318 Improper access control in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118318","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118318","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118318","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"8c93c3f9-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000fa4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118316","cveTitle":"Chromium: CVE-2026-118316 Improper input validation in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118316","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118316","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118316","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"ab8ab5f3-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000fe4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118312","cveTitle":"Chromium: CVE-2026-118312 Memory corruption in Paint","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118312","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118312","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118312","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"b2e71be6-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000fb4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118317","cveTitle":"Chromium: CVE-2026-118317 Memory corruption in HTML","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118317","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118317","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118317","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"118bb5f3-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f94305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118315","cveTitle":"Chromium: CVE-2026-118315 Improper input validation in SVG","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118315","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118315","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118315","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"177d13ed-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00005dcf5d0b","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118304","cveTitle":"Chromium: CVE-2026-118304 Improper input validation in SVG","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118304","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118304","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118304","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"54e3e5cc-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000ff4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118313","cveTitle":"Chromium: CVE-2026-118313 Use after free in Video","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118313","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118313","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118313","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"097d13ed-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000fd4305ae","releaseDate":"2026-10-31T07:00:00-07:00","cveNumber":"CVE-2026-118311","cveTitle":"Chromium: CVE-2026-118311 Memory corruption in Media","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-118311","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118311","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-118311","version":1,"revisionDate":"2026-10-31T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":false,"sourceId":"a4e71be6-f1d3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00000f500ebe","releaseDate":"2026-10-31T01:14:49-07:00","cveNumber":"CVE-2026-115905","cveTitle":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:14:49-07:00","cweList":["CWE-20: Improper Input Validation"],"cweDetailsListForSearch":["cwe: CWE-20: Improper Input Validation","cweUrl: https://cwe.mitre.org/data/definitions/20.html"],"mitreText":"CVE-2026-115905","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115905","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-20: Improper Input Validation","https://cwe.mitre.org/data/definitions/20.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115905","version":1,"revisionDate":"2026-10-31T01:14:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9c47c274-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00001b500ebe","releaseDate":"2026-10-31T01:14:39-07:00","cveNumber":"CVE-2026-115909","cveTitle":"zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:14:39-07:00","cweList":["CWE-400: Uncontrolled Resource Consumption"],"cweDetailsListForSearch":["cwe: CWE-400: Uncontrolled Resource Consumption","cweUrl: https://cwe.mitre.org/data/definitions/400.html"],"mitreText":"CVE-2026-115909","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115909","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-400: Uncontrolled Resource Consumption","https://cwe.mitre.org/data/definitions/400.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115909","version":1,"revisionDate":"2026-10-31T01:14:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b6f26e6e-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000ee591a4d","releaseDate":"2026-10-31T01:14:09-07:00","cveNumber":"CVE-2026-65629","cveTitle":"Weak PBKDF2 parameters for password-encrypted private-key export in jose","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:14:09-07:00","cweList":["CWE-916: Use of Password Hash With Insufficient Computational Effort"],"cweDetailsListForSearch":["cwe: CWE-916: Use of Password Hash With Insufficient Computational Effort","cweUrl: https://cwe.mitre.org/data/definitions/916.html"],"mitreText":"CVE-2026-65629","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-65629","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"EEF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-916: Use of Password Hash With Insufficient Computational Effort","https://cwe.mitre.org/data/definitions/916.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-65629","version":1,"revisionDate":"2026-10-31T01:14:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bc240b5c-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000084c7c713","releaseDate":"2026-10-31T01:13:22-07:00","cveNumber":"CVE-2026-119025","cveTitle":"open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:13:22-07:00","cweList":["CWE-78: Improper Neutralization of Special Elements used in an OS Command"],"cweDetailsListForSearch":["cwe: CWE-78: Improper Neutralization of Special Elements used in an OS Command","cweUrl: https://cwe.mitre.org/data/definitions/78.html"],"mitreText":"CVE-2026-119025","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119025","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-78: Improper Neutralization of Special Elements used in an OS Command","https://cwe.mitre.org/data/definitions/78.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119025","version":1,"revisionDate":"2026-10-31T01:13:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c35e4d43-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00001313713b","releaseDate":"2026-10-31T01:13:15-07:00","cveNumber":"CVE-2026-118669","cveTitle":"OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:13:15-07:00","cweList":["CWE-863: Incorrect Authorization"],"cweDetailsListForSearch":["cwe: CWE-863: Incorrect Authorization","cweUrl: https://cwe.mitre.org/data/definitions/863.html"],"mitreText":"CVE-2026-118669","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118669","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-863: Incorrect Authorization","https://cwe.mitre.org/data/definitions/863.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-118669","version":1,"revisionDate":"2026-10-31T01:13:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8f4ebc3c-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00009031b766","releaseDate":"2026-10-31T01:13:06-07:00","cveNumber":"CVE-2026-110259","cveTitle":"OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:13:06-07:00","cweList":["CWE-674: Uncontrolled Recursion"],"cweDetailsListForSearch":["cwe: CWE-674: Uncontrolled Recursion","cweUrl: https://cwe.mitre.org/data/definitions/674.html"],"mitreText":"CVE-2026-110259","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110259","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-674: Uncontrolled Recursion","https://cwe.mitre.org/data/definitions/674.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110259","version":1,"revisionDate":"2026-10-31T01:13:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"56dec036-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000095bb668","releaseDate":"2026-10-31T01:12:49-07:00","cveNumber":"CVE-2026-118131","cveTitle":"CVE-2026-118131","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:12:49-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-118131","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118131","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"certcc","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-118131","version":1,"revisionDate":"2026-10-31T01:12:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"80459d2a-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000a89c12ae","releaseDate":"2026-10-31T01:12:37-07:00","cveNumber":"CVE-2026-97631","cveTitle":"Pre-boot RCE in EDK II PXE driver","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:12:37-07:00","cweList":["CWE-120: Buffer Copy without Checking Size of Input"],"cweDetailsListForSearch":["cwe: CWE-120: Buffer Copy without Checking Size of Input","cweUrl: https://cwe.mitre.org/data/definitions/120.html"],"mitreText":"CVE-2026-97631","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97631","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"TianoCore","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-120: Buffer Copy without Checking Size of Input","https://cwe.mitre.org/data/definitions/120.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-97631","version":1,"revisionDate":"2026-10-31T01:12:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"354e6624-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000d9780c39","releaseDate":"2026-10-31T01:11:20-07:00","cveNumber":"CVE-2026-116591","cveTitle":"compress zstd: Panic on two-block frames","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:11:20-07:00","cweList":["CWE-190: Integer Overflow or Wraparound"],"cweDetailsListForSearch":["cwe: CWE-190: Integer Overflow or Wraparound","cweUrl: https://cwe.mitre.org/data/definitions/190.html"],"mitreText":"CVE-2026-116591","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116591","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-190: Integer Overflow or Wraparound","https://cwe.mitre.org/data/definitions/190.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116591","version":1,"revisionDate":"2026-10-31T01:11:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"afa956fa-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000042046596","releaseDate":"2026-10-31T01:09:42-07:00","cveNumber":"CVE-2026-116585","cveTitle":"Go JOSE: Panic during CBC-HMAC processing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:09:42-07:00","cweList":["CWE-129: Improper Validation of Array Index"],"cweDetailsListForSearch":["cwe: CWE-129: Improper Validation of Array Index","cweUrl: https://cwe.mitre.org/data/definitions/129.html"],"mitreText":"CVE-2026-116585","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116585","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-129: Improper Validation of Array Index","https://cwe.mitre.org/data/definitions/129.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116585","version":1,"revisionDate":"2026-10-31T01:09:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"978cf8ba-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000040046596","releaseDate":"2026-10-31T01:09:20-07:00","cveNumber":"CVE-2026-116587","cveTitle":"Go JOSE: DoS when parsing JWKs that contain RSA keys","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:09:20-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-116587","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116587","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116587","version":1,"revisionDate":"2026-10-31T01:09:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6aa3f1ae-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00003f046596","releaseDate":"2026-10-31T01:08:21-07:00","cveNumber":"CVE-2026-116586","cveTitle":"Go JOSE: Panics in JSON parsing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:08:21-07:00","cweList":["CWE-674: Uncontrolled Recursion"],"cweDetailsListForSearch":["cwe: CWE-674: Uncontrolled Recursion","cweUrl: https://cwe.mitre.org/data/definitions/674.html"],"mitreText":"CVE-2026-116586","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116586","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-674: Uncontrolled Recursion","https://cwe.mitre.org/data/definitions/674.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116586","version":1,"revisionDate":"2026-10-31T01:08:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b6a05b8f-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000b0f42989","releaseDate":"2026-10-31T01:05:37-07:00","cveNumber":"CVE-2026-119568","cveTitle":"vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:37-07:00","cweList":["CWE-940: Improper Verification of Source of a Communication Channel"],"cweDetailsListForSearch":["cwe: CWE-940: Improper Verification of Source of a Communication Channel","cweUrl: https://cwe.mitre.org/data/definitions/940.html"],"mitreText":"CVE-2026-119568","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119568","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.4","temporalScore":"7.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-940: Improper Verification of Source of a Communication Channel","https://cwe.mitre.org/data/definitions/940.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119568","version":1,"revisionDate":"2026-10-31T01:05:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"40b8b028-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000e89633a1","releaseDate":"2026-10-31T01:05:26-07:00","cveNumber":"CVE-2026-119591","cveTitle":"SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:26-07:00","cweList":["CWE-674: Uncontrolled Recursion"],"cweDetailsListForSearch":["cwe: CWE-674: Uncontrolled Recursion","cweUrl: https://cwe.mitre.org/data/definitions/674.html"],"mitreText":"CVE-2026-119591","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119591","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-674: Uncontrolled Recursion","https://cwe.mitre.org/data/definitions/674.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119591","version":1,"revisionDate":"2026-10-31T01:05:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"85949b22-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000840bdb43","releaseDate":"2026-10-31T01:05:21-07:00","cveNumber":"CVE-2026-119586","cveTitle":"SQLite CLI through 3.54.1 Command Injection via .recover Output","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:21-07:00","cweList":["CWE-77: Improper Neutralization of Special Elements used in a Command"],"cweDetailsListForSearch":["cwe: CWE-77: Improper Neutralization of Special Elements used in a Command","cweUrl: https://cwe.mitre.org/data/definitions/77.html"],"mitreText":"CVE-2026-119586","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119586","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-77: Improper Neutralization of Special Elements used in a Command","https://cwe.mitre.org/data/definitions/77.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119586","version":1,"revisionDate":"2026-10-31T01:05:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"71949b22-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000588082e6","releaseDate":"2026-10-31T01:05:15-07:00","cveNumber":"CVE-2026-119379","cveTitle":"SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:15-07:00","cweList":["CWE-787: Out-of-bounds Write"],"cweDetailsListForSearch":["cwe: CWE-787: Out-of-bounds Write","cweUrl: https://cwe.mitre.org/data/definitions/787.html"],"mitreText":"CVE-2026-119379","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119379","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-787: Out-of-bounds Write","https://cwe.mitre.org/data/definitions/787.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119379","version":1,"revisionDate":"2026-10-31T01:05:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"941ba31c-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000578082e6","releaseDate":"2026-10-31T01:05:09-07:00","cveNumber":"CVE-2026-119378","cveTitle":"SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:09-07:00","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"mitreText":"CVE-2026-119378","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119378","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119378","version":1,"revisionDate":"2026-10-31T01:05:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"791ba31c-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00005d8082e6","releaseDate":"2026-10-31T01:05:02-07:00","cveNumber":"CVE-2026-119376","cveTitle":"SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:05:02-07:00","cweList":["CWE-674: Uncontrolled Recursion"],"cweDetailsListForSearch":["cwe: CWE-674: Uncontrolled Recursion","cweUrl: https://cwe.mitre.org/data/definitions/674.html"],"mitreText":"CVE-2026-119376","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119376","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-674: Uncontrolled Recursion","https://cwe.mitre.org/data/definitions/674.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119376","version":1,"revisionDate":"2026-10-31T01:05:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"215f6c16-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00005c8082e6","releaseDate":"2026-10-31T01:04:56-07:00","cveNumber":"CVE-2026-119375","cveTitle":"SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:04:56-07:00","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"mitreText":"CVE-2026-119375","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119375","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119375","version":1,"revisionDate":"2026-10-31T01:04:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"65507110-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00005b8082e6","releaseDate":"2026-10-31T01:04:50-07:00","cveNumber":"CVE-2026-119374","cveTitle":"SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:04:50-07:00","cweList":["CWE-787: Out-of-bounds Write"],"cweDetailsListForSearch":["cwe: CWE-787: Out-of-bounds Write","cweUrl: https://cwe.mitre.org/data/definitions/787.html"],"mitreText":"CVE-2026-119374","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119374","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-787: Out-of-bounds Write","https://cwe.mitre.org/data/definitions/787.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119374","version":1,"revisionDate":"2026-10-31T01:04:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"53507110-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000628082e6","releaseDate":"2026-10-31T01:04:44-07:00","cveNumber":"CVE-2026-119373","cveTitle":"SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:04:44-07:00","cweList":["CWE-787: Out-of-bounds Write"],"cweDetailsListForSearch":["cwe: CWE-787: Out-of-bounds Write","cweUrl: https://cwe.mitre.org/data/definitions/787.html"],"mitreText":"CVE-2026-119373","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119373","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-787: Out-of-bounds Write","https://cwe.mitre.org/data/definitions/787.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119373","version":1,"revisionDate":"2026-10-31T01:04:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6e4d330a-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000618082e6","releaseDate":"2026-10-31T01:04:38-07:00","cveNumber":"CVE-2026-119372","cveTitle":"SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:04:38-07:00","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"mitreText":"CVE-2026-119372","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119372","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119372","version":1,"revisionDate":"2026-10-31T01:04:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"604d330a-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000608082e6","releaseDate":"2026-10-31T01:04:34-07:00","cveNumber":"CVE-2026-119371","cveTitle":"SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:04:34-07:00","cweList":["CWE-674: Uncontrolled Recursion"],"cweDetailsListForSearch":["cwe: CWE-674: Uncontrolled Recursion","cweUrl: https://cwe.mitre.org/data/definitions/674.html"],"mitreText":"CVE-2026-119371","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119371","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-674: Uncontrolled Recursion","https://cwe.mitre.org/data/definitions/674.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119371","version":1,"revisionDate":"2026-10-31T01:04:34-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1e4f2c04-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00008d300103","releaseDate":"2026-10-31T01:01:54-07:00","cveNumber":"CVE-2026-93522","cveTitle":"X.Org Server Glamor CopyArea Heap Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:54-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93522","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93522","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93522","version":1,"revisionDate":"2026-10-31T01:01:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"623757a5-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000669733a1","releaseDate":"2026-10-31T01:01:50-07:00","cveNumber":"CVE-2026-119197","cveTitle":"pyasn1: Quadratic-complexity denial of service in binary REAL decoding","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:50-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-119197","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119197","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119197","version":1,"revisionDate":"2026-10-31T01:01:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dea9aca4-c6d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000659733a1","releaseDate":"2026-10-31T01:01:45-07:00","cveNumber":"CVE-2026-119196","cveTitle":"pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:45-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-119196","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119196","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119196","version":1,"revisionDate":"2026-10-31T01:01:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"81c5739e-c6d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000689733a1","releaseDate":"2026-10-31T01:01:40-07:00","cveNumber":"CVE-2026-119195","cveTitle":"pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:40-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-119195","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119195","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-119195","version":1,"revisionDate":"2026-10-31T01:01:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"41c5739e-c6d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000091b1651","releaseDate":"2026-10-31T01:01:34-07:00","cveNumber":"CVE-2026-116566","cveTitle":"socket.getaddrinfo() accepts embedded null bytes in host and port","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:34-07:00","cweList":["CWE-158: Improper Neutralization of Null Byte or NUL Character"],"cweDetailsListForSearch":["cwe: CWE-158: Improper Neutralization of Null Byte or NUL Character","cweUrl: https://cwe.mitre.org/data/definitions/158.html"],"mitreText":"CVE-2026-116566","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116566","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"PSF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-158: Improper Neutralization of Null Byte or NUL Character","https://cwe.mitre.org/data/definitions/158.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116566","version":1,"revisionDate":"2026-10-31T01:01:34-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"81994698-c6d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000b8faadcd","releaseDate":"2026-10-31T01:01:26-07:00","cveNumber":"CVE-2026-114538","cveTitle":"Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:26-07:00","cweList":["CWE-79: Improper Neutralization of Input During Web Page Generation"],"cweDetailsListForSearch":["cwe: CWE-79: Improper Neutralization of Input During Web Page Generation","cweUrl: https://cwe.mitre.org/data/definitions/79.html"],"mitreText":"CVE-2026-114538","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114538","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"drupal","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-79: Improper Neutralization of Input During Web Page Generation","https://cwe.mitre.org/data/definitions/79.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-114538","version":1,"revisionDate":"2026-10-31T01:01:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"44994698-c6d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000032fdbf80","releaseDate":"2026-10-30T07:00:00-07:00","cveNumber":"CVE-2026-118147","cveTitle":"Visual Studio Spoofing Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T07:00:00-07:00","description":"

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

\n","cweList":["CWE-295: Improper Certificate Validation"],"cweDetailsListForSearch":["cwe: CWE-295: Improper Certificate Validation","cweUrl: https://cwe.mitre.org/data/definitions/295.html"],"unformattedDescription":"

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

","mitreText":"CVE-2026-118147","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118147","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Visual Studio","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000008,"impact":"Spoofing","langCode":"en-US","baseScore":"7.4","temporalScore":"6.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-295: Improper Certificate Validation","https://cwe.mitre.org/data/definitions/295.html"]}],"articles":[{"articleType":"FAQ","description":"

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

\n

The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), but could lead to no loss of availability (A:N). What does that mean for this vulnerability?

\n

Exploiting this vulnerability allows an attacker to view highly sensitive resource information (C:H) and results in a total loss of protection for that data (I:H), but does not provide the capability to impact resource availability.

\n","ordinal":10000},{"title":"Visual Studio Spoofing Vulnerability","articleType":"100000000","description":"

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

\n","ordinal":10000},{"title":"Visual Studio Spoofing Vulnerability","articleType":"100000000","description":"

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-118147","version":1,"revisionDate":"2026-10-30T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d2215525-80d4-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-0000844989f2","releaseDate":"2026-10-30T01:02:48-07:00","cveNumber":"CVE-2026-113724","cveTitle":"virtualenv: Deletion recovery can change a symlink target's mode","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:02:48-07:00","cweList":["CWE-59: Improper Link Resolution Before File Access"],"cweDetailsListForSearch":["cwe: CWE-59: Improper Link Resolution Before File Access","cweUrl: https://cwe.mitre.org/data/definitions/59.html"],"mitreText":"CVE-2026-113724","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113724","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.5","temporalScore":"4.5","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-59: Improper Link Resolution Before File Access","https://cwe.mitre.org/data/definitions/59.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-113724","version":1,"revisionDate":"2026-10-30T01:02:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f232d89c-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000cd9d23da","releaseDate":"2026-10-30T01:02:36-07:00","cveNumber":"CVE-2026-97313","cveTitle":"Specific RPZ configurations and query patterns may result in an unexpected exit","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:02:36-07:00","cweList":["CWE-617: Reachable Assertion"],"cweDetailsListForSearch":["cwe: CWE-617: Reachable Assertion","cweUrl: https://cwe.mitre.org/data/definitions/617.html"],"mitreText":"CVE-2026-97313","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97313","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"isc","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"isc","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-617: Reachable Assertion","https://cwe.mitre.org/data/definitions/617.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-97313","version":1,"revisionDate":"2026-10-30T01:02:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c07f4b96-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000005bd7a31","releaseDate":"2026-10-30T01:02:32-07:00","cveNumber":"CVE-2026-96888","cveTitle":"Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:02:32-07:00","cweList":["CWE-476: NULL Pointer Dereference"],"cweDetailsListForSearch":["cwe: CWE-476: NULL Pointer Dereference","cweUrl: https://cwe.mitre.org/data/definitions/476.html"],"mitreText":"CVE-2026-96888","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96888","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"isc","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"isc","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-476: NULL Pointer Dereference","https://cwe.mitre.org/data/definitions/476.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-96888","version":1,"revisionDate":"2026-10-30T01:02:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b9dc0890-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000094297c37","releaseDate":"2026-10-30T01:02:27-07:00","cveNumber":"CVE-2026-94300","cveTitle":"Concurrent GSS-TSIG messages corrupt memory","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:02:27-07:00","cweList":["CWE-415: Double Free"],"cweDetailsListForSearch":["cwe: CWE-415: Double Free","cweUrl: https://cwe.mitre.org/data/definitions/415.html"],"mitreText":"CVE-2026-94300","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94300","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"isc","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.1","temporalScore":"8.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"isc","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-415: Double Free","https://cwe.mitre.org/data/definitions/415.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-94300","version":1,"revisionDate":"2026-10-30T01:02:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95dc0890-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000efecb2b8","releaseDate":"2026-10-30T01:02:22-07:00","cveNumber":"CVE-2026-19630","cveTitle":"Amplified resource exhaustion in inbound message processing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:02:22-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-19630","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-19630","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"isc","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"isc","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-19630","version":1,"revisionDate":"2026-10-30T01:02:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"78a00b8a-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f8029f8d","releaseDate":"2026-10-30T01:02:17-07:00","cveNumber":"CVE-2026-93536","cveTitle":"X.Org Server GestureBuildSprite Use-After-Free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:45-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93536","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93536","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.3","temporalScore":"5.3","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93536","version":1,"revisionDate":"2026-10-30T01:02:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"58a00b8a-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93536","version":2,"revisionDate":"2026-10-31T01:01:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9fa1449f-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00002fecedd2","releaseDate":"2026-10-30T01:02:12-07:00","cveNumber":"CVE-2026-93524","cveTitle":"X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:02:09-07:00","cweList":["CWE-126: Buffer Over-read"],"cweDetailsListForSearch":["cwe: CWE-126: Buffer Over-read","cweUrl: https://cwe.mitre.org/data/definitions/126.html"],"mitreText":"CVE-2026-93524","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93524","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-126: Buffer Over-read","https://cwe.mitre.org/data/definitions/126.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93524","version":1,"revisionDate":"2026-10-30T01:02:12-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"76610984-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93524","version":2,"revisionDate":"2026-10-31T01:02:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5d05f3b2-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f2bb5960","releaseDate":"2026-10-30T01:02:07-07:00","cveNumber":"CVE-2026-93523","cveTitle":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:15:06-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93523","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93523","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93523","version":1,"revisionDate":"2026-10-30T01:02:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"62610984-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93523","version":2,"revisionDate":"2026-10-31T01:15:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4305fe80-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000028a5a8a5","releaseDate":"2026-10-30T01:02:02-07:00","cveNumber":"CVE-2026-93521","cveTitle":"X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:43-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93521","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93521","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93521","version":1,"revisionDate":"2026-10-30T01:02:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"88a1f17d-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93521","version":2,"revisionDate":"2026-10-31T01:01:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"85a1449f-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000c3195048","releaseDate":"2026-10-30T01:01:57-07:00","cveNumber":"CVE-2026-93520","cveTitle":"X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:02:07-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93520","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93520","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93520","version":1,"revisionDate":"2026-10-30T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6ca1f17d-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93520","version":2,"revisionDate":"2026-10-31T01:02:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ecf949ac-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-00004d006d90","releaseDate":"2026-10-30T01:01:52-07:00","cveNumber":"CVE-2026-93519","cveTitle":"X.Org Server XFixes Pointer Barrier Event List Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:39-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93519","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93519","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93519","version":1,"revisionDate":"2026-10-30T01:01:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5ca1f17d-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93519","version":2,"revisionDate":"2026-10-31T01:01:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5aa1449f-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000e8741433","releaseDate":"2026-10-30T01:01:47-07:00","cveNumber":"CVE-2026-93518","cveTitle":"X.Org Server XKB ResizeKeyType Numeric Truncation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:14:58-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93518","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93518","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93518","version":1,"revisionDate":"2026-10-30T01:01:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1ecd3c77-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93518","version":2,"revisionDate":"2026-10-31T01:14:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e5e3ba7a-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00005b8ef7ea","releaseDate":"2026-10-30T01:01:42-07:00","cveNumber":"CVE-2026-93517","cveTitle":"X.Org Server GLX RenderLarge Heap Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:59-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-93517","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93517","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93517","version":1,"revisionDate":"2026-10-30T01:01:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"83cc3c77-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93517","version":2,"revisionDate":"2026-10-31T01:01:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"daf949ac-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000f6029f8d","releaseDate":"2026-10-30T01:01:37-07:00","cveNumber":"CVE-2026-93516","cveTitle":".Org Server XInput Passive Grab Use-After-Free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:48-07:00","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"mitreText":"CVE-2026-93516","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93516","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.5","temporalScore":"5.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93516","version":1,"revisionDate":"2026-10-30T01:01:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c27d0571-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93516","version":2,"revisionDate":"2026-10-31T01:01:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ff3557a5-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000091774630","releaseDate":"2026-10-30T01:01:32-07:00","cveNumber":"CVE-2026-93515","cveTitle":".Org Server Present Extension Use-After-Free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:02:01-07:00","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"mitreText":"CVE-2026-93515","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93515","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93515","version":1,"revisionDate":"2026-10-30T01:01:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"877d0571-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-93515","version":2,"revisionDate":"2026-10-31T01:02:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e3f949ac-c6d4-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-000077f040a1","releaseDate":"2026-10-30T01:01:27-07:00","cveNumber":"CVE-2026-92709","cveTitle":"Rsyslog: DynFile Path Traversal \u2192 Arbitrary File Write as Root \u2192 RCE","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:01:27-07:00","cweList":["CWE-22: Improper Limitation of a Pathname to a Restricted Directory"],"cweDetailsListForSearch":["cwe: CWE-22: Improper Limitation of a Pathname to a Restricted Directory","cweUrl: https://cwe.mitre.org/data/definitions/22.html"],"mitreText":"CVE-2026-92709","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92709","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.1","temporalScore":"8.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-22: Improper Limitation of a Pathname to a Restricted Directory","https://cwe.mitre.org/data/definitions/22.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-92709","version":1,"revisionDate":"2026-10-30T01:01:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"189b0a6b-fdd3-f111-a059-7ced8d6e4554"}]},{"id":"00000000-0000-0000-0000-0000d2f449d3","releaseDate":"2026-10-29T01:13:22-07:00","cveNumber":"CVE-2026-115889","cveTitle":"Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:13:22-07:00","cweList":["CWE-197: Numeric Truncation Error"],"cweDetailsListForSearch":["cwe: CWE-197: Numeric Truncation Error","cweUrl: https://cwe.mitre.org/data/definitions/197.html"],"mitreText":"CVE-2026-115889","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115889","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.9","temporalScore":"9.9","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-197: Numeric Truncation Error","https://cwe.mitre.org/data/definitions/197.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115889","version":1,"revisionDate":"2026-10-29T01:13:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a7e25ea-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00002d80a230","releaseDate":"2026-10-29T01:13:07-07:00","cveNumber":"CVE-2026-115893","cveTitle":"Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:13:07-07:00","cweList":["CWE-691: Insufficient Control Flow Management"],"cweDetailsListForSearch":["cwe: CWE-691: Insufficient Control Flow Management","cweUrl: https://cwe.mitre.org/data/definitions/691.html"],"mitreText":"CVE-2026-115893","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115893","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.9","temporalScore":"9.9","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-691: Insufficient Control Flow Management","https://cwe.mitre.org/data/definitions/691.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115893","version":1,"revisionDate":"2026-10-29T01:13:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6fafe7e3-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000cab7ba4b","releaseDate":"2026-10-29T01:10:18-07:00","cveNumber":"CVE-2026-16762","cveTitle":"Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:10:18-07:00","cweList":["CWE-407: Inefficient Algorithmic Complexity"],"cweDetailsListForSearch":["cwe: CWE-407: Inefficient Algorithmic Complexity","cweUrl: https://cwe.mitre.org/data/definitions/407.html"],"mitreText":"CVE-2026-16762","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-16762","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Qt","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-407: Inefficient Algorithmic Complexity","https://cwe.mitre.org/data/definitions/407.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-16762","version":1,"revisionDate":"2026-10-29T01:10:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e0e57b7c-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000f4c4b560","releaseDate":"2026-10-29T01:10:08-07:00","cveNumber":"CVE-2026-115775","cveTitle":"Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:10:08-07:00","cweList":["CWE-400: Uncontrolled Resource Consumption"],"cweDetailsListForSearch":["cwe: CWE-400: Uncontrolled Resource Consumption","cweUrl: https://cwe.mitre.org/data/definitions/400.html"],"mitreText":"CVE-2026-115775","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115775","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-400: Uncontrolled Resource Consumption","https://cwe.mitre.org/data/definitions/400.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115775","version":1,"revisionDate":"2026-10-29T01:10:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c6848376-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000063c31d39","releaseDate":"2026-10-29T01:10:00-07:00","cveNumber":"CVE-2026-83813","cveTitle":"Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T14:44:33-07:00","cweList":["CWE-346: Origin Validation Error"],"cweDetailsListForSearch":["cwe: CWE-346: Origin Validation Error","cweUrl: https://cwe.mitre.org/data/definitions/346.html"],"mitreText":"CVE-2026-83813","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-83813","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.1","temporalScore":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-346: Origin Validation Error","https://cwe.mitre.org/data/definitions/346.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-83813","version":2,"revisionDate":"2026-10-29T14:44:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"df257940-a7d3-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-83813","version":1,"revisionDate":"2026-10-29T01:10:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"98848376-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000f3c4b560","releaseDate":"2026-10-29T01:09:57-07:00","cveNumber":"CVE-2026-115774","cveTitle":"Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:57-07:00","cweList":["CWE-400: Uncontrolled Resource Consumption"],"cweDetailsListForSearch":["cwe: CWE-400: Uncontrolled Resource Consumption","cweUrl: https://cwe.mitre.org/data/definitions/400.html"],"mitreText":"CVE-2026-115774","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115774","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.9","temporalScore":"4.9","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-400: Uncontrolled Resource Consumption","https://cwe.mitre.org/data/definitions/400.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115774","version":1,"revisionDate":"2026-10-29T01:09:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c62e8570-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e7c4b560","releaseDate":"2026-10-29T01:09:52-07:00","cveNumber":"CVE-2026-115778","cveTitle":"Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:52-07:00","cweList":["CWE-400: Uncontrolled Resource Consumption"],"cweDetailsListForSearch":["cwe: CWE-400: Uncontrolled Resource Consumption","cweUrl: https://cwe.mitre.org/data/definitions/400.html"],"mitreText":"CVE-2026-115778","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115778","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-400: Uncontrolled Resource Consumption","https://cwe.mitre.org/data/definitions/400.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115778","version":1,"revisionDate":"2026-10-29T01:09:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b72e8570-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000f5c4b560","releaseDate":"2026-10-29T01:09:47-07:00","cveNumber":"CVE-2026-115776","cveTitle":"Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:47-07:00","cweList":["CWE-400: Uncontrolled Resource Consumption"],"cweDetailsListForSearch":["cwe: CWE-400: Uncontrolled Resource Consumption","cweUrl: https://cwe.mitre.org/data/definitions/400.html"],"mitreText":"CVE-2026-115776","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115776","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-400: Uncontrolled Resource Consumption","https://cwe.mitre.org/data/definitions/400.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115776","version":1,"revisionDate":"2026-10-29T01:09:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b4335d6a-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000087c4b560","releaseDate":"2026-10-29T01:09:42-07:00","cveNumber":"CVE-2026-115877","cveTitle":"Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:42-07:00","cweList":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"],"cweDetailsListForSearch":["cwe: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","cweUrl: https://cwe.mitre.org/data/definitions/444.html"],"mitreText":"CVE-2026-115877","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115877","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.4","temporalScore":"5.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","https://cwe.mitre.org/data/definitions/444.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115877","version":1,"revisionDate":"2026-10-29T01:09:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a6335d6a-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00002980a230","releaseDate":"2026-10-29T01:09:35-07:00","cveNumber":"CVE-2026-115897","cveTitle":"Serialize JavaScript: Cross-site scripting (XSS) via unescaped Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"642f4f64-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000029ae04a6","releaseDate":"2026-10-29T01:09:30-07:00","cveNumber":"CVE-2026-115754","cveTitle":"serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e42e4f64-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000b5bd1f69","releaseDate":"2026-10-29T01:09:25-07:00","cveNumber":"CVE-2026-116137","cveTitle":"adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:25-07:00","cweList":["CWE-436: Interpretation Conflict"],"cweDetailsListForSearch":["cwe: CWE-436: Interpretation Conflict","cweUrl: https://cwe.mitre.org/data/definitions/436.html"],"mitreText":"CVE-2026-116137","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116137","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.7","temporalScore":"3.7","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-436: Interpretation Conflict","https://cwe.mitre.org/data/definitions/436.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116137","version":1,"revisionDate":"2026-10-29T01:09:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c19b565e-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000053f549d3","releaseDate":"2026-10-29T01:09:20-07:00","cveNumber":"CVE-2026-115484","cveTitle":"Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:20-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-115484","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115484","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"redhat","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.6","temporalScore":"7.6","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","vectorStringSource":"redhat","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115484","version":1,"revisionDate":"2026-10-29T01:09:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"989b565e-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000051f549d3","releaseDate":"2026-10-29T01:09:14-07:00","cveNumber":"CVE-2026-115486","cveTitle":"Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:14-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-115486","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115486","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"redhat","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.1","temporalScore":"7.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","vectorStringSource":"redhat","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115486","version":1,"revisionDate":"2026-10-29T01:09:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cd24d657-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000052f549d3","releaseDate":"2026-10-29T01:09:09-07:00","cveNumber":"CVE-2026-115485","cveTitle":"Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:09-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-115485","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115485","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"redhat","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.3","temporalScore":"6.3","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","vectorStringSource":"redhat","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115485","version":1,"revisionDate":"2026-10-29T01:09:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a578dd51-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00007f5e74a4","releaseDate":"2026-10-29T01:09:04-07:00","cveNumber":"CVE-2026-99216","cveTitle":"Drivers: hv: Don't reset VMBus connection state on error/exit paths","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:09:04-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99216","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99216","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99216","version":1,"revisionDate":"2026-10-29T01:09:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6378dd51-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e4e9cc01","releaseDate":"2026-10-29T01:08:59-07:00","cveNumber":"CVE-2026-99215","cveTitle":"power: supply: core: prevent unregistering a power supply while a callback runs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:59-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99215","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99215","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99215","version":1,"revisionDate":"2026-10-29T01:08:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2678dd51-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000086a5b9d1","releaseDate":"2026-10-29T01:08:53-07:00","cveNumber":"CVE-2026-99213","cveTitle":"vsock: treat TCP_CLOSING as once-established","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:53-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99213","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99213","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99213","version":1,"revisionDate":"2026-10-29T01:08:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a943e04b-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000eb30122f","releaseDate":"2026-10-29T01:08:48-07:00","cveNumber":"CVE-2026-99212","cveTitle":"net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:48-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99212","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99212","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99212","version":1,"revisionDate":"2026-10-29T01:08:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c00de345-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000050bc6a8c","releaseDate":"2026-10-29T01:08:44-07:00","cveNumber":"CVE-2026-99211","cveTitle":"netlink: reset skb headers before unicast and multicast filtering","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:44-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99211","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99211","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99211","version":1,"revisionDate":"2026-10-29T01:08:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"420de345-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000805e74a4","releaseDate":"2026-10-29T01:08:38-07:00","cveNumber":"CVE-2026-99206","cveTitle":"scsi: target: iscsi: Fix race in discovery auth updates","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99206","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99206","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99206","version":1,"revisionDate":"2026-10-29T01:08:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a035cb3f-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00004a75255f","releaseDate":"2026-10-29T01:08:33-07:00","cveNumber":"CVE-2026-99204","cveTitle":"ocfs2/dlm: Protect the recovery list during debugfs reads","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99204","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99204","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99204","version":1,"revisionDate":"2026-10-29T01:08:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3435cb3f-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000087a5b9d1","releaseDate":"2026-10-29T01:08:28-07:00","cveNumber":"CVE-2026-99203","cveTitle":"pipe: preserve existing fasync readers on writer setup failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:28-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99203","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99203","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99203","version":1,"revisionDate":"2026-10-29T01:08:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a696cb39-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000051bc6a8c","releaseDate":"2026-10-29T01:08:23-07:00","cveNumber":"CVE-2026-99201","cveTitle":"netlink: avoid hashing the network namespace pointer","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99201","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99201","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99201","version":1,"revisionDate":"2026-10-29T01:08:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8b96cb39-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000b84f59e1","releaseDate":"2026-10-29T01:08:19-07:00","cveNumber":"CVE-2026-99192","cveTitle":"net: bcmgenet: unshare the skb before writing the control block","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:19-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99192","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99192","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99192","version":1,"revisionDate":"2026-10-29T01:08:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7d03d333-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000053c40084","releaseDate":"2026-10-29T01:08:13-07:00","cveNumber":"CVE-2026-99191","cveTitle":"calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:13-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99191","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99191","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99191","version":1,"revisionDate":"2026-10-29T01:08:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5b03d333-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00007c1fc56e","releaseDate":"2026-10-29T01:08:09-07:00","cveNumber":"CVE-2026-99189","cveTitle":"gpio: mxc: fix race between chained IRQ handler install and probe completion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:09-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99189","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99189","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99189","version":1,"revisionDate":"2026-10-29T01:08:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3b03d333-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000b20814b4","releaseDate":"2026-10-29T01:08:04-07:00","cveNumber":"CVE-2026-99187","cveTitle":"perf: Fix perf_pmu_migrate_context() leaving events behind","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:08:04-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99187","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99187","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99187","version":1,"revisionDate":"2026-10-29T01:08:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5b95aa2d-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000b94f59e1","releaseDate":"2026-10-29T01:07:57-07:00","cveNumber":"CVE-2026-99182","cveTitle":"ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:57-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99182","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99182","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99182","version":1,"revisionDate":"2026-10-29T01:07:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"067b9527-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000054c40084","releaseDate":"2026-10-29T01:07:51-07:00","cveNumber":"CVE-2026-99181","cveTitle":"autofs: ignore notification errors from a replaced pipe","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:51-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99181","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99181","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99181","version":1,"revisionDate":"2026-10-29T01:07:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d77a9527-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000ef38a826","releaseDate":"2026-10-29T01:07:45-07:00","cveNumber":"CVE-2026-99180","cveTitle":"unicode: free the map after a grace period","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:45-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99180","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99180","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99180","version":1,"revisionDate":"2026-10-29T01:07:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c2069721-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00006d1fc56e","releaseDate":"2026-10-29T01:07:41-07:00","cveNumber":"CVE-2026-99179","cveTitle":"watch_queue: Fix note pool publication race in watch_queue_set_size()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99179","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99179","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99179","version":1,"revisionDate":"2026-10-29T01:07:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ae069721-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000008946c11","releaseDate":"2026-10-29T01:07:37-07:00","cveNumber":"CVE-2026-99178","cveTitle":"x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:37-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99178","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99178","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99178","version":1,"revisionDate":"2026-10-29T01:07:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"97998c1b-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00003e7dbb56","releaseDate":"2026-10-29T01:07:32-07:00","cveNumber":"CVE-2026-99176","cveTitle":"KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:32-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99176","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99176","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99176","version":1,"revisionDate":"2026-10-29T01:07:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7d998c1b-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000074660a9c","releaseDate":"2026-10-29T01:07:23-07:00","cveNumber":"CVE-2026-99174","cveTitle":"ext4: free the sbi after a grace period","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99174","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99174","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99174","version":1,"revisionDate":"2026-10-29T01:07:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ab886615-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000aa4f59e1","releaseDate":"2026-10-29T01:07:15-07:00","cveNumber":"CVE-2026-99172","cveTitle":"ipc: drop the mqueue mount with kern_unmount() on setup failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:15-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99172","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99172","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99172","version":1,"revisionDate":"2026-10-29T01:07:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9d16c20e-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000045c40084","releaseDate":"2026-10-29T01:07:09-07:00","cveNumber":"CVE-2026-99171","cveTitle":"ntfs3: free the sbi after a grace period","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:09-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99171","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99171","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99171","version":1,"revisionDate":"2026-10-29T01:07:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8416c20e-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00006e1fc56e","releaseDate":"2026-10-29T01:07:04-07:00","cveNumber":"CVE-2026-99169","cveTitle":"futex: Fix mm reuse handling for FUT_OFF_MMSHARED","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:07:04-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99169","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99169","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99169","version":1,"revisionDate":"2026-10-29T01:07:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"49c3a508-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000a40814b4","releaseDate":"2026-10-29T01:06:59-07:00","cveNumber":"CVE-2026-99167","cveTitle":"net/sched: fix use-after-free in __tcf_action_put()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:59-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99167","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99167","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99167","version":1,"revisionDate":"2026-10-29T01:06:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"26c3a508-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00003f7dbb56","releaseDate":"2026-10-29T01:06:52-07:00","cveNumber":"CVE-2026-99166","cveTitle":"net: rds: fix uninitialized trans dereference in CM event handler","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99166","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99166","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99166","version":1,"revisionDate":"2026-10-29T01:06:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2862ad02-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000daf162f9","releaseDate":"2026-10-29T01:06:47-07:00","cveNumber":"CVE-2026-99165","cveTitle":"sctp: revalidate output stream after association connect wait","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99165","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99165","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99165","version":1,"revisionDate":"2026-10-29T01:06:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ef61ad02-35d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000010dbb13e","releaseDate":"2026-10-29T01:06:42-07:00","cveNumber":"CVE-2026-99163","cveTitle":"tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99163","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99163","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99163","version":1,"revisionDate":"2026-10-29T01:06:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6a809ffc-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000046c40084","releaseDate":"2026-10-29T01:06:36-07:00","cveNumber":"CVE-2026-99161","cveTitle":"i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:36-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99161","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99161","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99161","version":1,"revisionDate":"2026-10-29T01:06:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"13809ffc-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000a50814b4","releaseDate":"2026-10-29T01:06:29-07:00","cveNumber":"CVE-2026-99157","cveTitle":"scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:29-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99157","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99157","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99157","version":1,"revisionDate":"2026-10-29T01:06:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dc8a39f6-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000407dbb56","releaseDate":"2026-10-29T01:06:23-07:00","cveNumber":"CVE-2026-99156","cveTitle":"scsi: st: Fix use-after-free race between st_remove() and st_open()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99156","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99156","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99156","version":1,"revisionDate":"2026-10-29T01:06:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e91d22f0-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000dbf162f9","releaseDate":"2026-10-29T01:06:18-07:00","cveNumber":"CVE-2026-99155","cveTitle":"scsi: xen/scsifront: Check for a NULL shadow entry on a backend response","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:18-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99155","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99155","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99155","version":1,"revisionDate":"2026-10-29T01:06:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ca1d22f0-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000076660a9c","releaseDate":"2026-10-29T01:06:13-07:00","cveNumber":"CVE-2026-99154","cveTitle":"scsi: libiscsi: Reject a negative task index from parse_pdu_itt","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:13-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99154","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99154","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99154","version":1,"revisionDate":"2026-10-29T01:06:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d4c41dea-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000011dbb13e","releaseDate":"2026-10-29T01:06:08-07:00","cveNumber":"CVE-2026-99153","cveTitle":"scsi: libiscsi: Validate the ITT reflected in a Reject PDU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:08-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99153","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99153","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99153","version":1,"revisionDate":"2026-10-29T01:06:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bac41dea-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000ac4f59e1","releaseDate":"2026-10-29T01:06:01-07:00","cveNumber":"CVE-2026-99152","cveTitle":"scsi: libiscsi: Validate the task named by a management response","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:06:01-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99152","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99152","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99152","version":1,"revisionDate":"2026-10-29T01:06:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3a0023e4-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e238a826","releaseDate":"2026-10-29T01:05:56-07:00","cveNumber":"CVE-2026-99150","cveTitle":"drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:56-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99150","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99150","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99150","version":1,"revisionDate":"2026-10-29T01:05:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"110023e4-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000a60814b4","releaseDate":"2026-10-29T01:05:49-07:00","cveNumber":"CVE-2026-99147","cveTitle":"drm/exec: don't immediately add prelocked obj to array of locked objs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:49-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99147","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99147","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99147","version":1,"revisionDate":"2026-10-29T01:05:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6457fddd-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000417dbb56","releaseDate":"2026-10-29T01:05:41-07:00","cveNumber":"CVE-2026-99146","cveTitle":"drm/i915/dmc: Add sanity check for DMC load address","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99146","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99146","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99146","version":1,"revisionDate":"2026-10-29T01:05:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9a17a5d7-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000012dbb13e","releaseDate":"2026-10-29T01:05:36-07:00","cveNumber":"CVE-2026-99143","cveTitle":"tracing: Keep the predicate limit separate from program capacity","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:36-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99143","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99143","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99143","version":1,"revisionDate":"2026-10-29T01:05:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8617a5d7-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000ad4f59e1","releaseDate":"2026-10-29T01:05:31-07:00","cveNumber":"CVE-2026-99142","cveTitle":"tracing: Check operator stack capacity before pushing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99142","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99142","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99142","version":1,"revisionDate":"2026-10-29T01:05:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a0f7a7d1-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e338a826","releaseDate":"2026-10-29T01:05:26-07:00","cveNumber":"CVE-2026-99140","cveTitle":"tracing: Fix hist trigger timestamps for buffered events","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:26-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99140","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99140","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99140","version":1,"revisionDate":"2026-10-29T01:05:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"82f7a7d1-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000711fc56e","releaseDate":"2026-10-29T01:05:21-07:00","cveNumber":"CVE-2026-99139","cveTitle":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99139","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99139","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99139","version":1,"revisionDate":"2026-10-29T01:05:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b74295cb-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00000c946c11","releaseDate":"2026-10-29T01:05:16-07:00","cveNumber":"CVE-2026-99138","cveTitle":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:16-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99138","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99138","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99138","version":1,"revisionDate":"2026-10-29T01:05:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9c4295cb-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000427dbb56","releaseDate":"2026-10-29T01:05:10-07:00","cveNumber":"CVE-2026-99136","cveTitle":"dm-crypt: fix a tiny race condition in crypt_dec_pending","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99136","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99136","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99136","version":1,"revisionDate":"2026-10-29T01:05:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9d5c93c5-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000ddf162f9","releaseDate":"2026-10-29T01:05:06-07:00","cveNumber":"CVE-2026-99135","cveTitle":"dm-integrity: fix infinite loop on discard with large tag size","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:06-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99135","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99135","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99135","version":1,"revisionDate":"2026-10-29T01:05:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8c5c93c5-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000013dbb13e","releaseDate":"2026-10-29T01:05:01-07:00","cveNumber":"CVE-2026-99133","cveTitle":"net/iucv: fix the recvmsg window update","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:05:01-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99133","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99133","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99133","version":1,"revisionDate":"2026-10-29T01:05:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4bb893bf-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000ae4f59e1","releaseDate":"2026-10-29T01:04:56-07:00","cveNumber":"CVE-2026-99132","cveTitle":"xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:56-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99132","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99132","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99132","version":1,"revisionDate":"2026-10-29T01:04:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2db893bf-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000049c40084","releaseDate":"2026-10-29T01:04:52-07:00","cveNumber":"CVE-2026-99131","cveTitle":"xfs: fix capability check in xfs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99131","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99131","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99131","version":1,"revisionDate":"2026-10-29T01:04:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dc169bb9-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e438a826","releaseDate":"2026-10-29T01:04:47-07:00","cveNumber":"CVE-2026-99130","cveTitle":"io_uring/cancel: don't spin on local work the task can't run","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99130","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99130","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99130","version":1,"revisionDate":"2026-10-29T01:04:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cc169bb9-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00000d946c11","releaseDate":"2026-10-29T01:04:43-07:00","cveNumber":"CVE-2026-99128","cveTitle":"sctp: validate chunk length in the inqueue parser","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:43-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99128","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99128","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99128","version":1,"revisionDate":"2026-10-29T01:04:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"29ac85b3-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000a80814b4","releaseDate":"2026-10-29T01:04:38-07:00","cveNumber":"CVE-2026-99127","cveTitle":"page_pool: keep frag_offset aligned for odd-sized requests","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99127","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99127","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99127","version":1,"revisionDate":"2026-10-29T01:04:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1aac85b3-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000437dbb56","releaseDate":"2026-10-29T01:04:33-07:00","cveNumber":"CVE-2026-99126","cveTitle":"s390/ctcm: Prevent XID null dereference","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99126","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99126","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99126","version":1,"revisionDate":"2026-10-29T01:04:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"07ac85b3-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000079660a9c","releaseDate":"2026-10-29T01:04:29-07:00","cveNumber":"CVE-2026-99124","cveTitle":"s390/pci: Fix leak of uninitialized kernel data in SCLP report","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:29-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99124","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99124","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99124","version":1,"revisionDate":"2026-10-29T01:04:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dbeb74ad-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000014dbb13e","releaseDate":"2026-10-29T01:04:23-07:00","cveNumber":"CVE-2026-99123","cveTitle":"vsock/virtio: validate packet source for connected sockets","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99123","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99123","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99123","version":1,"revisionDate":"2026-10-29T01:04:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cceb74ad-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000af4f59e1","releaseDate":"2026-10-29T01:04:18-07:00","cveNumber":"CVE-2026-99122","cveTitle":"vsock/vmci: validate packet source for connected sockets","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:18-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99122","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99122","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99122","version":1,"revisionDate":"2026-10-29T01:04:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3d7877a7-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00004ac40084","releaseDate":"2026-10-29T01:04:13-07:00","cveNumber":"CVE-2026-99121","cveTitle":"ipv4: avoid divide by zero in fib_rebalance","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:13-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99121","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99121","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99121","version":1,"revisionDate":"2026-10-29T01:04:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"167877a7-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00000e946c11","releaseDate":"2026-10-29T01:04:09-07:00","cveNumber":"CVE-2026-99118","cveTitle":"drm/i915/dmc: Harden DMC firmware payload parsing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:09-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99118","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99118","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99118","version":1,"revisionDate":"2026-10-29T01:04:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d5bffba0-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000a90814b4","releaseDate":"2026-10-29T01:04:04-07:00","cveNumber":"CVE-2026-99117","cveTitle":"net: bridge: mcast: don't truncate the port group walk on teardown","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:04:04-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99117","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99117","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99117","version":1,"revisionDate":"2026-10-29T01:04:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bcbffba0-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000dff162f9","releaseDate":"2026-10-29T01:03:59-07:00","cveNumber":"CVE-2026-99115","cveTitle":"ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:59-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99115","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99115","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99115","version":1,"revisionDate":"2026-10-29T01:03:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cd7dbb9a-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00007a660a9c","releaseDate":"2026-10-29T01:03:54-07:00","cveNumber":"CVE-2026-99114","cveTitle":"ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:54-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99114","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99114","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99114","version":1,"revisionDate":"2026-10-29T01:03:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8d7dbb9a-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-000015dbb13e","releaseDate":"2026-10-29T01:03:47-07:00","cveNumber":"CVE-2026-99113","cveTitle":"ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99113","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99113","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99113","version":1,"revisionDate":"2026-10-29T01:03:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"55b3bb94-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000b04f59e1","releaseDate":"2026-10-29T01:03:42-07:00","cveNumber":"CVE-2026-99112","cveTitle":"net/sched: cls_flower: validate mask pointer after nla_next()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99112","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99112","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99112","version":1,"revisionDate":"2026-10-29T01:03:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2db3bb94-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e638a826","releaseDate":"2026-10-29T01:03:37-07:00","cveNumber":"CVE-2026-99110","cveTitle":"smb: client: fix heap overflow in cifs_do_set_acl()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:37-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99110","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99110","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99110","version":1,"revisionDate":"2026-10-29T01:03:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5ebbbb8e-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000741fc56e","releaseDate":"2026-10-29T01:03:31-07:00","cveNumber":"CVE-2026-99109","cveTitle":"smb: client: reject SetEA requests that do not fit the request buffer","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99109","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99109","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99109","version":1,"revisionDate":"2026-10-29T01:03:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"05479888-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000457dbb56","releaseDate":"2026-10-29T01:03:26-07:00","cveNumber":"CVE-2026-99106","cveTitle":"drm/amdgpu: free the userptr ranges when a CS fails after parser_bos","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:26-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99106","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99106","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99106","version":1,"revisionDate":"2026-10-29T01:03:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ec469888-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00004cc40084","releaseDate":"2026-10-29T01:03:21-07:00","cveNumber":"CVE-2026-99101","cveTitle":"ntfs: move attribute payload before shrinking its record","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:03:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99101","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99101","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99101","version":1,"revisionDate":"2026-10-29T01:03:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d8469888-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000739ed8b6","releaseDate":"2026-10-29T01:03:15-07:00","cveNumber":"CVE-2026-117556","cveTitle":"zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T14:48:03-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-117556","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117556","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.3","temporalScore":"4.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-117556","version":1,"revisionDate":"2026-10-29T01:03:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a27b9c81-34d3-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-117556","version":2,"revisionDate":"2026-10-31T14:48:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"06c57b11-3ad5-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-00005937c5db","releaseDate":"2026-10-29T01:03:09-07:00","cveNumber":"CVE-2026-88812","cveTitle":"X.Org Server XKB SetGeometry TextDoodad Double Free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:01:35-07:00","cweList":["CWE-415: Double Free"],"cweDetailsListForSearch":["cwe: CWE-415: Double Free","cweUrl: https://cwe.mitre.org/data/definitions/415.html"],"mitreText":"CVE-2026-88812","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88812","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-415: Double Free","https://cwe.mitre.org/data/definitions/415.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-88812","version":2,"revisionDate":"2026-10-31T01:01:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ed152d99-c6d4-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-88812","version":1,"revisionDate":"2026-10-29T01:03:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"451d8b7b-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00008194ce1f","releaseDate":"2026-10-29T01:03:02-07:00","cveNumber":"CVE-2026-103995","cveTitle":"Lenient parsing of integers for response body and chunk framing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:14:53-07:00","cweList":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"],"cweDetailsListForSearch":["cwe: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","cweUrl: https://cwe.mitre.org/data/definitions/444.html"],"mitreText":"CVE-2026-103995","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103995","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"PSF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","https://cwe.mitre.org/data/definitions/444.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-103995","version":1,"revisionDate":"2026-10-29T01:03:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"301d8b7b-34d3-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-103995","version":2,"revisionDate":"2026-10-31T01:14:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"aa47c274-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000852a22f6","releaseDate":"2026-10-29T01:02:52-07:00","cveNumber":"CVE-2026-118384","cveTitle":"GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:02:52-07:00","cweList":["CWE-839: Numeric Range Comparison Without Minimum Check"],"cweDetailsListForSearch":["cwe: CWE-839: Numeric Range Comparison Without Minimum Check","cweUrl: https://cwe.mitre.org/data/definitions/839.html"],"mitreText":"CVE-2026-118384","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118384","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"mitre","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.1","temporalScore":"6.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","vectorStringSource":"mitre","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-839: Numeric Range Comparison Without Minimum Check","https://cwe.mitre.org/data/definitions/839.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-118384","version":1,"revisionDate":"2026-10-29T01:02:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d6d58175-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000de0fdb43","releaseDate":"2026-10-29T01:01:57-07:00","cveNumber":"CVE-2026-109088","cveTitle":"libXtst RECORD EnableContext Reply Endless Loop","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:01:57-07:00","cweList":["CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"],"cweDetailsListForSearch":["cwe: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')","cweUrl: https://cwe.mitre.org/data/definitions/835.html"],"mitreText":"CVE-2026-109088","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109088","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')","https://cwe.mitre.org/data/definitions/835.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-109088","version":1,"revisionDate":"2026-10-29T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c7f8af53-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00004b9b33a1","releaseDate":"2026-10-29T01:01:51-07:00","cveNumber":"CVE-2026-109090","cveTitle":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:01:51-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-109090","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109090","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-109090","version":1,"revisionDate":"2026-10-29T01:01:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7c48b44d-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000df0fdb43","releaseDate":"2026-10-29T01:01:46-07:00","cveNumber":"CVE-2026-109089","cveTitle":"libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:01:46-07:00","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"mitreText":"CVE-2026-109089","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109089","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"suse","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","vectorStringSource":"suse","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-109089","version":1,"revisionDate":"2026-10-29T01:01:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6148b44d-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000e738a826","releaseDate":"2026-10-29T01:01:41-07:00","cveNumber":"CVE-2026-99100","cveTitle":"wifi: p54: validate firmware record lengths","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:01:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99100","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99100","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99100","version":1,"revisionDate":"2026-10-29T01:01:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6acc9947-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-00005a8818de","releaseDate":"2026-10-29T01:01:35-07:00","cveNumber":"CVE-2026-118370","cveTitle":"libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:11:24-07:00","cweList":["CWE-190: Integer Overflow or Wraparound"],"cweDetailsListForSearch":["cwe: CWE-190: Integer Overflow or Wraparound","cweUrl: https://cwe.mitre.org/data/definitions/190.html"],"mitreText":"CVE-2026-118370","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118370","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.9","temporalScore":"5.9","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-190: Integer Overflow or Wraparound","https://cwe.mitre.org/data/definitions/190.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-118370","version":1,"revisionDate":"2026-10-29T01:01:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4ecc9947-34d3-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-118370","version":2,"revisionDate":"2026-10-31T01:11:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"08aa56fa-c7d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000a4cb3a2c","releaseDate":"2026-10-29T01:01:30-07:00","cveNumber":"CVE-2026-117610","cveTitle":"libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:01:30-07:00","cweList":["CWE-476: NULL Pointer Dereference"],"cweDetailsListForSearch":["cwe: CWE-476: NULL Pointer Dereference","cweUrl: https://cwe.mitre.org/data/definitions/476.html"],"mitreText":"CVE-2026-117610","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117610","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.9","temporalScore":"5.9","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-476: NULL Pointer Dereference","https://cwe.mitre.org/data/definitions/476.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-117610","version":1,"revisionDate":"2026-10-29T01:01:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"06099941-34d3-f111-a059-7ced8d6f06f2"}]},{"id":"00000000-0000-0000-0000-0000919dc811","releaseDate":"2026-10-28T01:47:48-07:00","cveNumber":"CVE-2026-111943","cveTitle":"Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-11-01T02:44:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-111943","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111943","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Go","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-111943","version":2,"revisionDate":"2026-10-31T01:45:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dfc7efae-ccd4-f111-a059-7ced8d6f0a57"},{"cveNumber":"CVE-2026-111943","version":1,"revisionDate":"2026-10-28T01:47:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"61f61f91-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-111943","version":3,"revisionDate":"2026-11-01T02:44:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"42bba0ce-95d5-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00007d801c75","releaseDate":"2026-10-28T01:02:06-07:00","cveNumber":"CVE-2026-2270","cveTitle":"StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:02:06-07:00","cweList":["CWE-639: Authorization Bypass Through User-Controlled Key"],"cweDetailsListForSearch":["cwe: CWE-639: Authorization Bypass Through User-Controlled Key","cweUrl: https://cwe.mitre.org/data/definitions/639.html"],"mitreText":"CVE-2026-2270","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-2270","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"kubernetes","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.9","temporalScore":"5.9","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"kubernetes","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-639: Authorization Bypass Through User-Controlled Key","https://cwe.mitre.org/data/definitions/639.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-2270","version":1,"revisionDate":"2026-10-28T01:02:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4cc1362e-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-00003a4878c6","releaseDate":"2026-10-28T01:01:57-07:00","cveNumber":"CVE-2026-116620","cveTitle":"Tencent RapidJSON Regex stream.h Take out-of-bounds","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:01:57-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-116620","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116620","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulDB","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.3","temporalScore":"6.9","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","vectorStringSource":"VulDB","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116620","version":1,"revisionDate":"2026-10-28T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c7f42328-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-0000f6bc1f69","releaseDate":"2026-10-28T01:01:47-07:00","cveNumber":"CVE-2026-116732","cveTitle":"libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:01:47-07:00","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"mitreText":"CVE-2026-116732","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116732","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.4","temporalScore":"4.4","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-116732","version":1,"revisionDate":"2026-10-28T01:01:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ddb7a521-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-0000869d1c51","releaseDate":"2026-10-27T07:00:00-07:00","cveNumber":"CVE-2026-62765","cveTitle":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-27T07:00:00-07:00","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

","mitreText":"CVE-2026-62765","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-62765","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000005,"impact":"Remote Code Execution","langCode":"en-US","baseScore":"7.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","articleType":"100000000","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

\n

Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.

\n","ordinal":10001}],"revisions":[{"cveNumber":"CVE-2026-62765","version":1,"revisionDate":"2026-10-27T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b20e4cc5-0f9c-f111-93a1-000d3ac5fb71"}]},{"id":"00000000-0000-0000-0000-00009f7dbb56","releaseDate":"2026-10-27T07:00:00-07:00","cveNumber":"CVE-2026-96196","cveTitle":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-27T07:00:00-07:00","description":"

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

\n","cweList":["CWE-184: Incomplete List of Disallowed Inputs"],"cweDetailsListForSearch":["cwe: CWE-184: Incomplete List of Disallowed Inputs","cweUrl: https://cwe.mitre.org/data/definitions/184.html"],"unformattedDescription":"

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

","mitreText":"CVE-2026-96196","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96196","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":4,"latestSoftwareRelease":"N/A","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000007,"impact":"Security Feature Bypass","langCode":"en-US","baseScore":"8.8","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-184: Incomplete List of Disallowed Inputs","https://cwe.mitre.org/data/definitions/184.html"]}],"articles":[{"title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","articleType":"100000000","description":"

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

\n

Successful exploitation could bypass the path validation safeguards that check which files may be changed and require user approval for sensitive locations, allowing changes to protected files without the user\u2019s knowledge or consent.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

\n

The user must open or load attacker\u2011controlled content\u2014such as importing a malicious WSDL or opening a file\u2014so the application processes it and triggers the vulnerability.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-96196","version":1,"revisionDate":"2026-10-27T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"18a0512e-c7b6-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-000089bb88c8","releaseDate":"2026-10-27T07:00:00-07:00","cveNumber":"CVE-2026-88078","cveTitle":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T07:00:00-07:00","description":"

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

\n","cweList":["CWE-347: Improper Verification of Cryptographic Signature"],"cweDetailsListForSearch":["cwe: CWE-347: Improper Verification of Cryptographic Signature","cweUrl: https://cwe.mitre.org/data/definitions/347.html"],"unformattedDescription":"

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

","mitreText":"CVE-2026-88078","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88078","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000002,"severity":"Moderate","impactId":100000008,"impact":"Spoofing","langCode":"en-US","baseScore":"4.3","temporalScore":"3.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-347: Improper Verification of Cryptographic Signature","https://cwe.mitre.org/data/definitions/347.html"]}],"articles":[{"articleType":"FAQ","description":"

According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?

\n

An attacker using either a specially-crafted page or a content script injected into a target page can show an extension's popup over a permission prompt or screen share dialog allowing the extension to spoof parts of the prompt's UI that shows its origin.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","articleType":"100000000","description":"

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-88078","version":1,"revisionDate":"2026-10-27T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e9365746-acb7-f111-93fe-000d3afbc7d7"},{"cveNumber":"CVE-2026-88078","version":1.1,"revisionDate":"2026-10-29T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

CWE added. Informational change only.

\n","unformattedDescription":"CWE added. Informational change only.","notificationNeeded":false,"notificationSent":false,"sourceId":"e46d007e-a3d3-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00002f12ea16","releaseDate":"2026-10-27T07:00:00-07:00","cveNumber":"CVE-2026-20942","cveTitle":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-27T07:00:00-07:00","description":"

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

\n","cweList":["CWE-1021: Improper Restriction of Rendered UI Layers or Frames"],"cweDetailsListForSearch":["cwe: CWE-1021: Improper Restriction of Rendered UI Layers or Frames","cweUrl: https://cwe.mitre.org/data/definitions/1021.html"],"unformattedDescription":"

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

","mitreText":"CVE-2026-20942","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20942","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000003,"severity":"Low","impactId":100000008,"impact":"Spoofing","langCode":"en-US","baseScore":"4.3","temporalScore":"3.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-1021: Improper Restriction of Rendered UI Layers or Frames","https://cwe.mitre.org/data/definitions/1021.html"]}],"articles":[{"articleType":"FAQ","description":"

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L),but lead to no loss of availability (A:N) and integrity (I:N)? What does that mean for this vulnerability?

\n

An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

\n

This vulnerability requires that a user have multiple browser instances open of the affected version of Microsoft Edge (Chromium-based), one of which is a specially crafted website hosted by the attacker. The user would need to access the URL of the malicious website and then click a popup displayed on that site.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","articleType":"100000000","description":"

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-20942","version":1,"revisionDate":"2026-10-27T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8d5a53ab-3fdd-f011-93f5-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-0000e2f9f8f0","releaseDate":"2026-10-27T01:04:03-07:00","cveNumber":"CVE-2026-99095","cveTitle":"drm/vc4: drain the hangcheck timer and works on V3D unbind","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:01:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99095","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99095","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99095","version":1,"revisionDate":"2026-10-27T01:04:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1cea1149-a2d1-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-99095","version":2,"revisionDate":"2026-10-28T01:01:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cab7a521-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-0000b357efd8","releaseDate":"2026-10-27T01:03:53-07:00","cveNumber":"CVE-2026-99090","cveTitle":"drm/amdgpu: serialize vblank counter reads against GPU reset","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:01:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99090","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99090","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99090","version":1,"revisionDate":"2026-10-27T01:03:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"16f90a43-a2d1-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-99090","version":2,"revisionDate":"2026-10-28T01:01:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"da47821b-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-0000dcb2b3c3","releaseDate":"2026-10-27T01:03:48-07:00","cveNumber":"CVE-2026-99088","cveTitle":"net: openvswitch: validate transport header presence in set_ipv6_addr","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:01:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99088","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99088","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99088","version":1,"revisionDate":"2026-10-27T01:03:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f4f80a43-a2d1-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-99088","version":2,"revisionDate":"2026-10-28T01:01:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a247821b-6bd2-f111-a059-7ced8d6f0999"}]},{"id":"00000000-0000-0000-0000-00007e4c78c6","releaseDate":"2026-10-26T23:51:41-07:00","cveNumber":"CVE-2026-106427","cveTitle":"Chromium CVE-2026-106427: Confused deputy in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:41-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106427","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106427","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106427","version":1,"revisionDate":"2026-10-26T23:51:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"998c092f-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000d9d7d023","releaseDate":"2026-10-26T23:51:39-07:00","cveNumber":"CVE-2026-106419","cveTitle":"Chromium CVE-2026-106419: Use after free in ANGLE","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:39-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106419","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106419","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106419","version":1,"revisionDate":"2026-10-26T23:51:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"728c092f-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000e4d7d023","releaseDate":"2026-10-26T23:51:37-07:00","cveNumber":"CVE-2026-106414","cveTitle":"Chromium CVE-2026-106414: Improper input validation in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:37-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106414","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106414","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106414","version":1,"revisionDate":"2026-10-26T23:51:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2be51229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00003d632981","releaseDate":"2026-10-26T23:51:35-07:00","cveNumber":"CVE-2026-106408","cveTitle":"Chromium CVE-2026-106408: Protection mechanism failure in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:35-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106408","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106408","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106408","version":1,"revisionDate":"2026-10-26T23:51:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"10e51229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000047632981","releaseDate":"2026-10-26T23:51:33-07:00","cveNumber":"CVE-2026-106406","cveTitle":"Chromium CVE-2026-106406: Missing authorization in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:33-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106406","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106406","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106406","version":1,"revisionDate":"2026-10-26T23:51:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e8e41229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00004a632981","releaseDate":"2026-10-26T23:51:32-07:00","cveNumber":"CVE-2026-106405","cveTitle":"Chromium CVE-2026-106405: Race condition in CustomTabs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:32-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106405","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106405","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106405","version":1,"revisionDate":"2026-10-26T23:51:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bee41229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000045632981","releaseDate":"2026-10-26T23:51:30-07:00","cveNumber":"CVE-2026-106400","cveTitle":"Chromium CVE-2026-106400: Clickjacking in Messages","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:30-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106400","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106400","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106400","version":1,"revisionDate":"2026-10-26T23:51:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9ee41229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000587d0c39","releaseDate":"2026-10-26T23:51:28-07:00","cveNumber":"CVE-2026-106397","cveTitle":"Chromium CVE-2026-106397: Incorrect authorization in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:28-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106397","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106397","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106397","version":1,"revisionDate":"2026-10-26T23:51:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8de41229-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000567d0c39","releaseDate":"2026-10-26T23:51:27-07:00","cveNumber":"CVE-2026-106395","cveTitle":"Chromium CVE-2026-106395: Uninitialized resource in Dawn","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:27-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106395","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106395","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106395","version":1,"revisionDate":"2026-10-26T23:51:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a881523-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000bd086596","releaseDate":"2026-10-26T23:51:25-07:00","cveNumber":"CVE-2026-106387","cveTitle":"Chromium CVE-2026-106387: Missing authorization in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:25-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106387","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106387","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106387","version":1,"revisionDate":"2026-10-26T23:51:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6b881523-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000c0086596","releaseDate":"2026-10-26T23:51:23-07:00","cveNumber":"CVE-2026-106380","cveTitle":"Chromium CVE-2026-106380: UI misrepresentation in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:23-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106380","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106380","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106380","version":1,"revisionDate":"2026-10-26T23:51:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4f881523-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000821f1651","releaseDate":"2026-10-26T23:51:21-07:00","cveNumber":"CVE-2026-106368","cveTitle":"Chromium CVE-2026-106368: UI misrepresentation in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:21-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106368","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106368","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106368","version":1,"revisionDate":"2026-10-26T23:51:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"40881523-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000871f1651","releaseDate":"2026-10-26T23:51:20-07:00","cveNumber":"CVE-2026-106367","cveTitle":"Chromium CVE-2026-106367: Missing authorization in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:20-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106367","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106367","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106367","version":1,"revisionDate":"2026-10-26T23:51:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"25881523-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000881f1651","releaseDate":"2026-10-26T23:51:18-07:00","cveNumber":"CVE-2026-106366","cveTitle":"Chromium CVE-2026-106366: Incomplete cleanup in CustomTabs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:18-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106366","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106366","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106366","version":1,"revisionDate":"2026-10-26T23:51:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3cd41c1d-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000891f1651","releaseDate":"2026-10-26T23:51:16-07:00","cveNumber":"CVE-2026-106361","cveTitle":"Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:16-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106361","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106361","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106361","version":1,"revisionDate":"2026-10-26T23:51:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"25d41c1d-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000f0aa6eae","releaseDate":"2026-10-26T23:51:15-07:00","cveNumber":"CVE-2026-106353","cveTitle":"Chromium CVE-2026-106353: Improper input validation in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:15-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106353","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106353","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106353","version":1,"revisionDate":"2026-10-26T23:51:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0ed41c1d-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000b6c11f69","releaseDate":"2026-10-26T23:51:13-07:00","cveNumber":"CVE-2026-106337","cveTitle":"Chromium CVE-2026-106337: UI misrepresentation in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:13-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106337","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106337","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106337","version":1,"revisionDate":"2026-10-26T23:51:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e9d31c1d-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00001c4d78c6","releaseDate":"2026-10-26T23:51:11-07:00","cveNumber":"CVE-2026-106326","cveTitle":"Chromium CVE-2026-106326: Confused deputy in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:11-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106326","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106326","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106326","version":1,"revisionDate":"2026-10-26T23:51:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c6d31c1d-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00001e4d78c6","releaseDate":"2026-10-26T23:51:08-07:00","cveNumber":"CVE-2026-106320","cveTitle":"Chromium CVE-2026-106320: Use of released resource in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:08-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106320","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106320","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106320","version":1,"revisionDate":"2026-10-26T23:51:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb6c2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000080d8d023","releaseDate":"2026-10-26T23:51:06-07:00","cveNumber":"CVE-2026-106317","cveTitle":"Chromium CVE-2026-106317: UI misrepresentation in FullScreen","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:06-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106317","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106317","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106317","version":1,"revisionDate":"2026-10-26T23:51:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"906c2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000084d8d023","releaseDate":"2026-10-26T23:51:05-07:00","cveNumber":"CVE-2026-106313","cveTitle":"Chromium CVE-2026-106313: Incorrect authorization in Browser","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:05-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106313","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106313","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106313","version":1,"revisionDate":"2026-10-26T23:51:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6a6c2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000e3632981","releaseDate":"2026-10-26T23:51:03-07:00","cveNumber":"CVE-2026-106305","cveTitle":"Chromium CVE-2026-106305: UI misrepresentation in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:03-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106305","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106305","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106305","version":1,"revisionDate":"2026-10-26T23:51:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2b6c2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000f27c0c39","releaseDate":"2026-10-26T23:51:01-07:00","cveNumber":"CVE-2026-106298","cveTitle":"Chromium CVE-2026-106298: Use after free in Chrome Tabs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:51:01-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106298","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106298","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106298","version":1,"revisionDate":"2026-10-26T23:51:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"026c2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000f87c0c39","releaseDate":"2026-10-26T23:50:59-07:00","cveNumber":"CVE-2026-106296","cveTitle":"Chromium CVE-2026-106296: Improper privilege management in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:59-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106296","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106296","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106296","version":1,"revisionDate":"2026-10-26T23:50:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c86b2417-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000fa7c0c39","releaseDate":"2026-10-26T23:50:57-07:00","cveNumber":"CVE-2026-106290","cveTitle":"Chromium CVE-2026-106290: Uninitialized resource in GPU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:57-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106290","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106290","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106290","version":1,"revisionDate":"2026-10-26T23:50:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ef962911-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00008aaa6eae","releaseDate":"2026-10-26T23:50:56-07:00","cveNumber":"CVE-2026-106254","cveTitle":"Chromium CVE-2026-106254: Information leak in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:56-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106254","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106254","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106254","version":1,"revisionDate":"2026-10-26T23:50:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c1962911-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000c04c78c6","releaseDate":"2026-10-26T23:50:54-07:00","cveNumber":"CVE-2026-106223","cveTitle":"Chromium CVE-2026-106223: Uninitialized resource in GPU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:54-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106223","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106223","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106223","version":1,"revisionDate":"2026-10-26T23:50:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a2962911-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000be4c78c6","releaseDate":"2026-10-26T23:50:52-07:00","cveNumber":"CVE-2026-106221","cveTitle":"Chromium CVE-2026-106221: Confused deputy in WebAPKs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:52-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106221","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106221","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106221","version":1,"revisionDate":"2026-10-26T23:50:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4e962911-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000080632981","releaseDate":"2026-10-26T23:50:50-07:00","cveNumber":"CVE-2026-106209","cveTitle":"Chromium CVE-2026-106209: UI misrepresentation in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:50-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106209","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106209","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106209","version":1,"revisionDate":"2026-10-26T23:50:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"26962911-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-000085632981","releaseDate":"2026-10-26T23:50:48-07:00","cveNumber":"CVE-2026-106206","cveTitle":"Chromium CVE-2026-106206: Improper input validation in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:48-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106206","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106206","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106206","version":1,"revisionDate":"2026-10-26T23:50:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5115300b-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00009b7d0c39","releaseDate":"2026-10-26T23:50:46-07:00","cveNumber":"CVE-2026-106192","cveTitle":"Chromium CVE-2026-106192: Information leak in Mobile","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:46-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106192","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106192","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106192","version":1,"revisionDate":"2026-10-26T23:50:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3615300b-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000076dd0a4","releaseDate":"2026-10-26T23:50:44-07:00","cveNumber":"CVE-2026-102327","cveTitle":"Chromium CVE-2026-102327: Incorrect authorization in WebView","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:50:44-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102327","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102327","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102327","version":1,"revisionDate":"2026-10-26T23:50:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1915300b-98d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-0000f231b766","releaseDate":"2026-10-26T23:16:43-07:00","cveNumber":"CVE-2026-110158","cveTitle":"Chromium CVE-2026-110158: Use after free in Passwords","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T23:16:43-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110158","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110158","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-110158","version":1,"revisionDate":"2026-10-26T23:16:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"502f714b-93d1-f111-a05a-70a8a59b7d14"}]},{"id":"00000000-0000-0000-0000-00002794bdf3","releaseDate":"2026-10-26T22:57:03-07:00","cveNumber":"CVE-2026-106372","cveTitle":"Chromium CVE-2026-106372: Incorrect authorization in UI","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T22:57:03-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106372","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106372","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106372","version":1,"revisionDate":"2026-10-26T22:57:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"be9f218d-90d1-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-000061086596","releaseDate":"2026-10-26T22:56:57-07:00","cveNumber":"CVE-2026-106282","cveTitle":"Chromium CVE-2026-106282: UI misrepresentation in WebOTP","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T22:56:57-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-106282","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106282","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-106282","version":1,"revisionDate":"2026-10-26T22:56:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c4bc1c87-90d1-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-00005d0355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110913","cveTitle":"Chromium CVE-2026-110913: Memory corruption in DOM","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T18:08:39-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110913","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110913","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110913","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4ac86fca-91c9-f111-aaad-000d3a3779aa"},{"cveNumber":"CVE-2026-110913","version":2,"revisionDate":"2026-10-28T18:08:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6defaa98-fad2-f111-a059-7ced8d6dc516"}]},{"id":"00000000-0000-0000-0000-0000660355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110918","cveTitle":"Chromium CVE-2026-110918: Memory corruption in Core","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T18:08:45-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110918","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110918","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110918","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8e25d3dc-91c9-f111-aaad-000d3a3779aa"},{"cveNumber":"CVE-2026-110918","version":2,"revisionDate":"2026-10-28T18:08:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e7efaa98-fad2-f111-a059-7ced8d6dc516"}]},{"id":"00000000-0000-0000-0000-00005b0355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110915","cveTitle":"Chromium CVE-2026-110915: Use after free in Compositing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110915","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110915","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110915","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c3b071d6-91c9-f111-aaad-000d3a3779aa"}]},{"id":"00000000-0000-0000-0000-00005a0355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110914","cveTitle":"Chromium CVE-2026-110914: Memory corruption in Workers","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110914","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110914","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110914","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c75574d0-91c9-f111-aaad-000d3a3779aa"}]},{"id":"00000000-0000-0000-0000-00008ea55e09","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110921","cveTitle":"Chromium CVE-2026-110921: Use after free in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T18:08:56-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110921","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110921","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110921","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"042115e9-91c9-f111-aaad-000d3a3779aa"},{"cveNumber":"CVE-2026-110921","version":2,"revisionDate":"2026-10-28T18:08:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"218bef9e-fad2-f111-a059-7ced8d6dc516"}]},{"id":"00000000-0000-0000-0000-00008da55e09","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110920","cveTitle":"Chromium CVE-2026-110920: Memory corruption in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110920","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110920","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110920","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4dd9d2e2-91c9-f111-aaad-000d3a3779aa"}]},{"id":"00000000-0000-0000-0000-0000670355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110919","cveTitle":"Chromium CVE-2026-110919: Use after free in V8","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T18:08:51-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110919","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110919","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110919","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"12d9d2e2-91c9-f111-aaad-000d3a3779aa"},{"cveNumber":"CVE-2026-110919","version":2,"revisionDate":"2026-10-28T18:08:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f78aef9e-fad2-f111-a059-7ced8d6dc516"}]},{"id":"00000000-0000-0000-0000-0000590355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110917","cveTitle":"Chromium CVE-2026-110917: Memory corruption in SVG","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110917","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110917","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110917","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7525d3dc-91c9-f111-aaad-000d3a3779aa"}]},{"id":"00000000-0000-0000-0000-0000580355f1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110916","cveTitle":"Chromium CVE-2026-110916: Improper input validation in Desktop","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110916","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110916","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110916","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dab071d6-91c9-f111-aaad-000d3a3779aa"}]},{"id":"00000000-0000-0000-0000-0000624d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103622","cveTitle":"Chromium CVE-2026-103622: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103622","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103622","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103622","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2db33bac-dfc0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000614d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103621","cveTitle":"Chromium CVE-2026-103621: Integer overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103621","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103621","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103621","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5f6d0276-dfc0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000634d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103623","cveTitle":"Chromium CVE-2026-103623: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103623","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103623","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103623","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6dbf82e2-dfc0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000c6d8e14f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103631","cveTitle":"Chromium CVE-2026-103631: Buffer overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103631","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103631","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103631","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ecaae639-e1c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000c5d8e14f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103630","cveTitle":"Chromium CVE-2026-103630: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103630","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103630","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103630","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d9420810-e1c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000594d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103629","cveTitle":"Chromium CVE-2026-103629: Integer overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103629","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103629","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103629","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"25c629e6-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000584d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103628","cveTitle":"Chromium CVE-2026-103628: Out of bounds write","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103628","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103628","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103628","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fbbfcdbb-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000664d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103626","cveTitle":"Chromium CVE-2026-103626: Incorrect authorization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103626","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103626","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103626","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"72026f61-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000654d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103625","cveTitle":"Chromium CVE-2026-103625: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103625","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103625","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103625","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"43f7a336-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000674d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103627","cveTitle":"Chromium CVE-2026-103627: Information leak","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103627","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103627","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103627","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"db00838b-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000644d89f2","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-103624","cveTitle":"Chromium CVE-2026-103624: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-103624","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103624","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-103624","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4788ac06-e0c0-f111-aaae-6045bd00cd58"}]},{"id":"00000000-0000-0000-0000-0000d483815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102300","cveTitle":"Chromium CVE-2026-102300: Uninitialized resource in WebGPU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102300","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102300","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102300","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"80adc259-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00008ba55e09","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-110922","cveTitle":"Chromium CVE-2026-110922: Use after free in Prerender","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T18:09:02-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-110922","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110922","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-110922","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"35a320ef-91c9-f111-aaad-000d3a3779aa"},{"cveNumber":"CVE-2026-110922","version":2,"revisionDate":"2026-10-28T18:09:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ffaceca4-fad2-f111-a059-7ced8d6dc516"}]},{"id":"00000000-0000-0000-0000-00002430306b","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-88077","cveTitle":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","cweList":["CWE-190: Integer Overflow or Wraparound"],"cweDetailsListForSearch":["cwe: CWE-190: Integer Overflow or Wraparound","cweUrl: https://cwe.mitre.org/data/definitions/190.html"],"unformattedDescription":"

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

","mitreText":"CVE-2026-88077","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88077","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"8.8","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-190: Integer Overflow or Wraparound","https://cwe.mitre.org/data/definitions/190.html"]}],"articles":[{"articleType":"FAQ","description":"

What privileges could be gained by an attacker who successfully exploited this vulnerability?

\n

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

\n","ordinal":10000},{"articleType":"FAQ","description":"

How could an attacker exploit this vulnerability via the Network?

\n

An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-88077","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0f244366-f4b1-f111-93a1-000d3ac5fb71"}]},{"id":"00000000-0000-0000-0000-00000a6dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102320","cveTitle":"Chromium CVE-2026-102320: Missing authorization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-862: Missing Authorization"],"cweDetailsListForSearch":["cwe: CWE-862: Missing Authorization","cweUrl: https://cwe.mitre.org/data/definitions/862.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102320","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102320","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-862: Missing Authorization","https://cwe.mitre.org/data/definitions/862.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102320","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"871a1166-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006bf82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102314","cveTitle":"Chromium CVE-2026-102314: UI misrepresentation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-451: User Interface (UI) Misrepresentation of Critical Information"],"cweDetailsListForSearch":["cwe: CWE-451: User Interface (UI) Misrepresentation of Critical Information","cweUrl: https://cwe.mitre.org/data/definitions/451.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102314","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102314","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.4","temporalScore":"5.4","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-451: User Interface (UI) Misrepresentation of Critical Information","https://cwe.mitre.org/data/definitions/451.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102314","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a575f713-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000096dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102321","cveTitle":"Chromium CVE-2026-102321: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102321","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102321","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102321","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ec9c7a74-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00002751a893","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-85899","cveTitle":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

","mitreText":"CVE-2026-85899","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-85899","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":3,"latestSoftwareRelease":"Exploitation Unlikely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"8.1","temporalScore":"7.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What privileges could be gained by an attacker who successfully exploited the vulnerability?

\n

An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained ("sandboxed") execution environment to a Medium Integrity Level or a High Integrity Level.

\n

Please refer to AppContainer isolation and Mandatory Integrity Control for more information.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-85899","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"279341aa-fcab-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-000070f82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102313","cveTitle":"Chromium CVE-2026-102313: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102313","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102313","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.7","temporalScore":"4.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102313","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"41526507-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-000071f82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102312","cveTitle":"Chromium CVE-2026-102312: UI misrepresentation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-451: User Interface (UI) Misrepresentation of Critical Information"],"cweDetailsListForSearch":["cwe: CWE-451: User Interface (UI) Misrepresentation of Critical Information","cweUrl: https://cwe.mitre.org/data/definitions/451.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102312","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102312","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.3","temporalScore":"4.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-451: User Interface (UI) Misrepresentation of Critical Information","https://cwe.mitre.org/data/definitions/451.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102312","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8fc863fa-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-000066f82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102319","cveTitle":"Chromium CVE-2026-102319: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102319","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102319","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.4","temporalScore":"3.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102319","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e659035a-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006ff82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102310","cveTitle":"Chromium CVE-2026-102310: Missing authorization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-862: Missing Authorization"],"cweDetailsListForSearch":["cwe: CWE-862: Missing Authorization","cweUrl: https://cwe.mitre.org/data/definitions/862.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102310","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102310","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-862: Missing Authorization","https://cwe.mitre.org/data/definitions/862.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102310","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c9d504e2-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-000067f82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102318","cveTitle":"Chromium CVE-2026-102318: Out of bounds read","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-125: Out-of-bounds Read"],"cweDetailsListForSearch":["cwe: CWE-125: Out-of-bounds Read","cweUrl: https://cwe.mitre.org/data/definitions/125.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102318","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102318","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.7","temporalScore":"4.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-125: Out-of-bounds Read","https://cwe.mitre.org/data/definitions/125.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102318","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6ec6414b-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006cf82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102317","cveTitle":"Chromium CVE-2026-102317: Improper privilege management","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-269: Improper Privilege Management"],"cweDetailsListForSearch":["cwe: CWE-269: Improper Privilege Management","cweUrl: https://cwe.mitre.org/data/definitions/269.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102317","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102317","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.6","temporalScore":"8.6","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-269: Improper Privilege Management","https://cwe.mitre.org/data/definitions/269.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102317","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6f97203f-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d283815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102306","cveTitle":"Chromium CVE-2026-102306: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102306","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102306","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102306","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"caef44ab-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d683815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102302","cveTitle":"Chromium CVE-2026-102302: Buffer overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-121: Stack-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-121: Stack-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/121.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102302","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102302","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-121: Stack-based Buffer Overflow","https://cwe.mitre.org/data/definitions/121.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102302","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9d776a73-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000df9c6417","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102299","cveTitle":"Chromium CVE-2026-102299: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102299","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102299","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102299","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"db7dd147-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006df82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102316","cveTitle":"Chromium CVE-2026-102316: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102316","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102316","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102316","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0f5a2b32-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d383815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102301","cveTitle":"Chromium CVE-2026-102301: Out of bounds write","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-787: Out-of-bounds Write"],"cweDetailsListForSearch":["cwe: CWE-787: Out-of-bounds Write","cweUrl: https://cwe.mitre.org/data/definitions/787.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102301","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102301","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.3","temporalScore":"8.3","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-787: Out-of-bounds Write","https://cwe.mitre.org/data/definitions/787.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102301","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"17ace266-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006af82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102315","cveTitle":"Chromium CVE-2026-102315: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102315","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102315","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.4","temporalScore":"3.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102315","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f6f93426-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00006ef82802","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102311","cveTitle":"Chromium CVE-2026-102311: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102311","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102311","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.4","temporalScore":"3.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102311","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6dfc0bee-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000cb83815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102309","cveTitle":"Chromium CVE-2026-102309: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102309","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102309","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102309","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"825c5dd3-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000a4e17747","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102331","cveTitle":"Chromium CVE-2026-102331: Buffer overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-122: Heap-based Buffer Overflow"],"cweDetailsListForSearch":["cwe: CWE-122: Heap-based Buffer Overflow","cweUrl: https://cwe.mitre.org/data/definitions/122.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102331","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102331","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-122: Heap-based Buffer Overflow","https://cwe.mitre.org/data/definitions/122.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102331","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3bec75df-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000cc83815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102308","cveTitle":"Chromium CVE-2026-102308: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102308","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102308","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102308","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f7a730c4-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000a5e17747","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102330","cveTitle":"Chromium CVE-2026-102330: Incorrect authorization","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-863: Incorrect Authorization"],"cweDetailsListForSearch":["cwe: CWE-863: Incorrect Authorization","cweUrl: https://cwe.mitre.org/data/definitions/863.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102330","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102330","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-863: Incorrect Authorization","https://cwe.mitre.org/data/definitions/863.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102330","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f5bb80d2-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000cf83815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102305","cveTitle":"Chromium CVE-2026-102305: UI misrepresentation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-451: User Interface (UI) Misrepresentation of Critical Information"],"cweDetailsListForSearch":["cwe: CWE-451: User Interface (UI) Misrepresentation of Critical Information","cweUrl: https://cwe.mitre.org/data/definitions/451.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102305","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102305","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.4","temporalScore":"5.4","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-451: User Interface (UI) Misrepresentation of Critical Information","https://cwe.mitre.org/data/definitions/451.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102305","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7d93079f-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000016dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102329","cveTitle":"Chromium CVE-2026-102329: Cross-site scripting","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"cweDetailsListForSearch":["cwe: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","cweUrl: https://cwe.mitre.org/data/definitions/79.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102329","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102329","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.1","temporalScore":"6.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","https://cwe.mitre.org/data/definitions/79.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102329","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b8696dc6-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000026dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102328","cveTitle":"Chromium CVE-2026-102328: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102328","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102328","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102328","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7b8eefb9-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000086dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102326","cveTitle":"Chromium CVE-2026-102326: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102326","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102326","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102326","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0336f8ac-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000066dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102324","cveTitle":"Chromium CVE-2026-102324: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102324","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102324","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.3","temporalScore":"8.3","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102324","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8f94678e-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-00000b6dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102323","cveTitle":"Chromium CVE-2026-102323: Type confusion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102323","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102323","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102323","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9f13c280-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000056dd0a4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102325","cveTitle":"Chromium CVE-2026-102325: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102325","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102325","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.3","temporalScore":"4.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102325","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d5698fa0-dfbd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d183815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102307","cveTitle":"Chromium CVE-2026-102307: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102307","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102307","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.7","temporalScore":"4.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102307","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b67e61b7-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d083815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102304","cveTitle":"Chromium CVE-2026-102304: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102304","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102304","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102304","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"298aa68c-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000d583815f","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-102303","cveTitle":"Chromium CVE-2026-102303: Uninitialized resource","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-908: Use of Uninitialized Resource"],"cweDetailsListForSearch":["cwe: CWE-908: Use of Uninitialized Resource","cweUrl: https://cwe.mitre.org/data/definitions/908.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-102303","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102303","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.3","temporalScore":"4.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-908: Use of Uninitialized Resource","https://cwe.mitre.org/data/definitions/908.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-102303","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3abb3480-debd-f111-aaae-000d3a5aaec7"}]},{"id":"00000000-0000-0000-0000-0000030914b4","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-96187","cveTitle":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

","mitreText":"CVE-2026-96187","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96187","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":4,"latestSoftwareRelease":"N/A","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000003,"impact":"Information Disclosure","langCode":"en-US","baseScore":"7.4","temporalScore":"6.4","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","articleType":"100000000","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What type of information could be disclosed by this vulnerability?

\n

An attacker who successfully exploited this vulnerability could potentially read portions of process memory.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?

\n

This vulnerability could lead to a browser sandbox escape.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

\n

The user would have to click on a specially crafted URL to be compromised by the attacker, and navigate to a malicious site where malicious code would execute a series of specially crafted queries.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-96187","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bccf5171-c5b6-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-00001722254d","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-85330","cveTitle":"Microsoft Edge for Android Security Feature Bypass Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

\n","cweList":["CWE-863: Incorrect Authorization"],"cweDetailsListForSearch":["cwe: CWE-863: Incorrect Authorization","cweUrl: https://cwe.mitre.org/data/definitions/863.html"],"unformattedDescription":"

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

","mitreText":"CVE-2026-85330","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-85330","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":3,"latestSoftwareRelease":"Exploitation Unlikely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge for Android","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000002,"severity":"Moderate","impactId":100000007,"impact":"Security Feature Bypass","langCode":"en-US","baseScore":"4.3","temporalScore":"3.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-863: Incorrect Authorization","https://cwe.mitre.org/data/definitions/863.html"]}],"articles":[{"articleType":"FAQ","description":"

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

\n

An attacker who successfully exploited this vulnerability could smuggle another HTTP request and bypass front-end security controls or hijack other users' credentials.

\n","ordinal":20000},{"articleType":"FAQ","description":"

According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?

\n

An attacker using either a specially-crafted page or a content script injected into a target page can show an extension's popup over a permission prompt or screen share dialog allowing the extension to spoof parts of the prompt's UI that shows its origin.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

\n

The user would have to click on a specially crafted URL to be compromised by the attacker, and navigate to a malicious site where malicious code would execute a series of specially crafted queries.

\n","ordinal":10000},{"title":"Microsoft Edge for Android Security Feature Bypass Vulnerability","articleType":"100000000","description":"

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-85330","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"05f1c032-acb7-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-00006f60c4dd","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-88090","cveTitle":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","cweList":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"],"cweDetailsListForSearch":["cwe: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","cweUrl: https://cwe.mitre.org/data/definitions/843.html"],"unformattedDescription":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

","mitreText":"CVE-2026-88090","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88090","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000002,"severity":"Moderate","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"5.4","temporalScore":"4.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","https://cwe.mitre.org/data/definitions/843.html"]}],"articles":[{"articleType":"FAQ","description":"

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?

\n

An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?

\n

Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-88090","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95c3f35e-acb7-f111-93a1-000d3ac5fb71"},{"cveNumber":"CVE-2026-88090","version":2,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.

\n","unformattedDescription":"Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.","notificationNeeded":false,"notificationSent":false,"sourceId":"03bc5db1-5fd1-f111-a059-7ced8d6f0a57"}]},{"id":"00000000-0000-0000-0000-0000e8a5b9d1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-96203","cveTitle":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

","mitreText":"CVE-2026-96203","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96203","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"8.8","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What privileges could be gained by an attacker who successfully exploited the vulnerability?

\n

An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained ("sandboxed") execution environment to a Medium Integrity Level or a High Integrity Level.

\n

Please refer to AppContainer isolation and Mandatory Integrity Control for more information.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

\n

The user must visit the attacker\u2011controlled webpage, and perform the two tap gestures that cause autofill to activate.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-96203","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dfe6a33e-d5b6-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-00000b5059e1","releaseDate":"2026-10-26T07:00:00-07:00","cveNumber":"CVE-2026-96192","cveTitle":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T07:00:00-07:00","description":"

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

","mitreText":"CVE-2026-96192","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96192","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":4,"latestSoftwareRelease":"N/A","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge for iOS","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000005,"impact":"Remote Code Execution","langCode":"en-US","baseScore":"8.8","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"title":"Microsoft Edge for iOS Remote Code Execution Vulnerability","articleType":"100000000","description":"

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

\n","ordinal":10000},{"articleType":"FAQ","description":"

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

\n

This attack requires an authenticated client to click a link so that an unauthenticated attacker can initiate remote code execution.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-96192","version":1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"27c4491c-c7b6-f111-93fe-000d3afbc7d7"}]},{"id":"00000000-0000-0000-0000-00006aae04a6","releaseDate":"2026-10-26T01:03:15-07:00","cveNumber":"CVE-2026-115557","cveTitle":"Distrust compromised intermediate certificates in ssl module","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:46:00-07:00","cweList":["CWE-299: Improper Check for Certificate Revocation"],"cweDetailsListForSearch":["cwe: CWE-299: Improper Check for Certificate Revocation","cweUrl: https://cwe.mitre.org/data/definitions/299.html"],"mitreText":"CVE-2026-115557","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115557","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"PSF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-299: Improper Check for Certificate Revocation","https://cwe.mitre.org/data/definitions/299.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115557","version":4,"revisionDate":"2026-10-28T01:46:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a13eb84e-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115557","version":2,"revisionDate":"2026-10-26T14:50:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c4a88899-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-115557","version":1,"revisionDate":"2026-10-26T01:03:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a53f002-d9d0-f111-a059-7ced8d6f0999"},{"cveNumber":"CVE-2026-115557","version":3,"revisionDate":"2026-10-27T01:46:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f9510535-a8d1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00004342f3fa","releaseDate":"2026-10-25T07:00:00-07:00","cveNumber":"CVE-2026-114148","cveTitle":"ASP.NET Core Elevation of Privilege Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-25T07:00:00-07:00","description":"

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

\n","cweList":["CWE-276: Incorrect Default Permissions"],"cweDetailsListForSearch":["cwe: CWE-276: Incorrect Default Permissions","cweUrl: https://cwe.mitre.org/data/definitions/276.html"],"unformattedDescription":"

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

","mitreText":"CVE-2026-114148","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114148","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"ASP.NET Core","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"7.8","temporalScore":"6.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-276: Incorrect Default Permissions","https://cwe.mitre.org/data/definitions/276.html"]}],"articles":[{"title":"ASP.NET Core Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

\n","ordinal":10000},{"title":"ASP.NET Core Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What privileges could be gained by an attacker who successfully exploited this vulnerability?

\n

An attacker who successfully exploited this vulnerability could gain the highest privileges on the system.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-114148","version":1,"revisionDate":"2026-10-25T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":true,"sourceId":"65fd83e8-63ce-f111-a059-00224803da89"}]},{"id":"00000000-0000-0000-0000-0000a1a0fa0e","releaseDate":"2026-10-25T07:00:00-07:00","cveNumber":"CVE-2026-111497","cveTitle":"Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T01:13:53-07:00","description":"

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.

\n","cweList":[],"cweDetailsListForSearch":[],"unformattedDescription":"

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.

","mitreText":"CVE-2026-111497","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111497","publiclyDisclosed":"Yes","exploited":"No","latestSoftwareReleaseId":1,"latestSoftwareRelease":"Exploitation More Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":".NET","issuingCna":"Google","issuingCnaId":100000002,"severityId":100000000,"severity":"Critical","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"8.1","temporalScore":"7.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[{"title":".NET Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.

\n","ordinal":10000},{"articleType":"Mitigation","description":"

Brotli decompression is not enabled by default in an out-of-the-box .NET or ASP.NET Core install. Applications must manually opt in to ASP.NET Core request decompression or HttpClient response decompression, or they must manually invoke the Brotli decompression APIs provided by .NET.

\n","ordinal":10000},{"articleType":"FAQ","description":"

Why is this third-party CVE included in the Security Update Guide?

\n

This CVE concerns a vulnerability in the Brotli library used by .NET. See the Google security advisory for information about the upstream vulnerability. For background on how Microsoft documents partner-assigned CVEs, see Security Update Guide Supports CVEs Assigned by Industry Partners.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-111497","version":1,"revisionDate":"2026-10-25T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":true,"notificationSent":true,"sourceId":"543791cc-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-111497","version":3,"revisionDate":"2026-10-30T01:02:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e17f4b96-fdd3-f111-a059-7ced8d6e4554"},{"cveNumber":"CVE-2026-111497","version":1.1,"revisionDate":"2026-10-26T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Acknowledgement Updated

\n","unformattedDescription":"Acknowledgement Updated","notificationNeeded":false,"notificationSent":false,"sourceId":"3099955b-dfd0-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-111497","version":4,"revisionDate":"2026-10-31T01:13:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"40ef1256-c8d4-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000acf549d3","releaseDate":"2026-10-25T01:05:45-07:00","cveNumber":"CVE-2026-115384","cveTitle":"Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:19-07:00","cweList":["CWE-20: Improper Input Validation"],"cweDetailsListForSearch":["cwe: CWE-20: Improper Input Validation","cweUrl: https://cwe.mitre.org/data/definitions/20.html"],"mitreText":"CVE-2026-115384","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115384","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.9","temporalScore":"9.9","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-20: Improper Input Validation","https://cwe.mitre.org/data/definitions/20.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115384","version":2,"revisionDate":"2026-10-26T14:49:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a7fcff7a-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-115384","version":1,"revisionDate":"2026-10-25T01:05:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6d3a4932-10d0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-115384","version":3,"revisionDate":"2026-10-28T01:50:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a75e11ee-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000b3f549d3","releaseDate":"2026-10-25T01:05:39-07:00","cveNumber":"CVE-2026-115383","cveTitle":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:58-07:00","cweList":["CWE-1287: Improper Validation of Specified Type of Input"],"cweDetailsListForSearch":["cwe: CWE-1287: Improper Validation of Specified Type of Input","cweUrl: https://cwe.mitre.org/data/definitions/1287.html"],"mitreText":"CVE-2026-115383","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115383","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.8","temporalScore":"4.8","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-1287: Improper Validation of Specified Type of Input","https://cwe.mitre.org/data/definitions/1287.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115383","version":3,"revisionDate":"2026-10-28T01:45:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"933eb84e-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115383","version":1,"revisionDate":"2026-10-25T01:05:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a4a4ec2b-10d0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-115383","version":2,"revisionDate":"2026-10-27T01:45:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8963a422-a8d1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000ad10aaab","releaseDate":"2026-10-25T01:05:30-07:00","cveNumber":"CVE-2026-99087","cveTitle":"dm-integrity: fix NULL pointer dereference when the 'R' flag is used","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:24-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99087","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99087","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99087","version":3,"revisionDate":"2026-10-26T14:49:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5a809a6e-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99087","version":2,"revisionDate":"2026-10-25T01:07:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ad4e4263-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99087","version":1,"revisionDate":"2026-10-25T01:05:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6789d825-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000019e34736","releaseDate":"2026-10-25T01:05:28-07:00","cveNumber":"CVE-2026-99083","cveTitle":"ksmbd: fix heap out-of-bounds write in krb5_authenticate()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:13-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99083","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99083","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99083","version":3,"revisionDate":"2026-10-26T14:49:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a0ae9a68-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99083","version":2,"revisionDate":"2026-10-25T01:06:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2fa43d5d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99083","version":1,"revisionDate":"2026-10-25T01:05:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5689d825-10d0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99083","version":4,"revisionDate":"2026-10-28T01:50:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"292a08e8-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00007e6ea093","releaseDate":"2026-10-25T01:05:25-07:00","cveNumber":"CVE-2026-99082","cveTitle":"KVM: x86: Use active memslots for the per-vCPU MMIO cache","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:16-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99082","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99082","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99082","version":3,"revisionDate":"2026-10-26T14:49:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"71ae9a68-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99082","version":2,"revisionDate":"2026-10-25T01:06:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"22a43d5d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99082","version":1,"revisionDate":"2026-10-25T01:05:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4789d825-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00004fcc967b","releaseDate":"2026-10-25T01:05:23-07:00","cveNumber":"CVE-2026-99081","cveTitle":"bnxt_en: fix DMA mapping length for padded small packets","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99081","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99081","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99081","version":3,"revisionDate":"2026-10-26T14:49:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"43495f62-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99081","version":2,"revisionDate":"2026-10-25T01:06:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6be7ff56-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99081","version":1,"revisionDate":"2026-10-25T01:05:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3a89d825-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000b457efd8","releaseDate":"2026-10-25T01:05:20-07:00","cveNumber":"CVE-2026-99080","cveTitle":"fs: Free any excess xarray nodes in clear_inode()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:06-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99080","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99080","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99080","version":3,"revisionDate":"2026-10-26T14:49:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2f495f62-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99080","version":2,"revisionDate":"2026-10-25T01:06:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5ee7ff56-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99080","version":1,"revisionDate":"2026-10-25T01:05:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2989d825-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000068275b66","releaseDate":"2026-10-25T01:05:18-07:00","cveNumber":"CVE-2026-99079","cveTitle":"net/mlx5e: Prevent stale XSK buffer release on refill retry","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99079","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99079","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.8","temporalScore":"9.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99079","version":3,"revisionDate":"2026-10-26T14:49:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"25495f62-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99079","version":2,"revisionDate":"2026-10-25T01:06:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"50e7ff56-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99079","version":1,"revisionDate":"2026-10-25T01:05:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5097a61f-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000cdb2b3c3","releaseDate":"2026-10-25T01:05:15-07:00","cveNumber":"CVE-2026-99078","cveTitle":"net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:58-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99078","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99078","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.8","temporalScore":"9.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99078","version":3,"revisionDate":"2026-10-26T14:48:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7ccb665c-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99078","version":2,"revisionDate":"2026-10-25T01:06:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"48e7ff56-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99078","version":1,"revisionDate":"2026-10-25T01:05:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3f97a61f-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00009e10aaab","releaseDate":"2026-10-25T01:05:13-07:00","cveNumber":"CVE-2026-99077","cveTitle":"ipv4: udp: Create exceptions before socket matching","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:54-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99077","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99077","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.4","temporalScore":"7.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99077","version":3,"revisionDate":"2026-10-26T14:48:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b7ca665c-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99077","version":2,"revisionDate":"2026-10-25T01:06:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fdd9e64f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99077","version":1,"revisionDate":"2026-10-25T01:05:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3197a61f-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000039c0209","releaseDate":"2026-10-25T01:05:11-07:00","cveNumber":"CVE-2026-99076","cveTitle":"ipv6: udp: Create exceptions before socket matching","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99076","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99076","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99076","version":3,"revisionDate":"2026-10-26T14:48:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"954a3756-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99076","version":2,"revisionDate":"2026-10-25T01:06:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f1d9e64f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99076","version":1,"revisionDate":"2026-10-25T01:05:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2497a61f-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006f6ea093","releaseDate":"2026-10-25T01:05:09-07:00","cveNumber":"CVE-2026-99072","cveTitle":"ipv4: stop route notification sizing when nexthop group shrinks","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:46-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99072","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99072","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99072","version":3,"revisionDate":"2026-10-26T14:48:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2f4a3756-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99072","version":2,"revisionDate":"2026-10-25T01:06:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6bf8d649-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99072","version":1,"revisionDate":"2026-10-25T01:05:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"792fa919-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000040cc967b","releaseDate":"2026-10-25T01:05:06-07:00","cveNumber":"CVE-2026-99071","cveTitle":"ipv4: do not warn on route notification size race","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99071","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99071","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99071","version":3,"revisionDate":"2026-10-26T14:48:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8e19f04f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99071","version":2,"revisionDate":"2026-10-25T01:06:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"62f8d649-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99071","version":1,"revisionDate":"2026-10-25T01:05:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"682fa919-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a557efd8","releaseDate":"2026-10-25T01:05:04-07:00","cveNumber":"CVE-2026-99070","cveTitle":"ipv6: do not warn on route notification size race","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:37-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99070","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99070","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99070","version":3,"revisionDate":"2026-10-26T14:48:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7519f04f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99070","version":2,"revisionDate":"2026-10-25T01:06:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"57f8d649-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99070","version":1,"revisionDate":"2026-10-25T01:05:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5a2fa919-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00009f10aaab","releaseDate":"2026-10-25T01:05:01-07:00","cveNumber":"CVE-2026-99067","cveTitle":"btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99067","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99067","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99067","version":3,"revisionDate":"2026-10-26T14:48:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5219f04f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99067","version":2,"revisionDate":"2026-10-25T01:06:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f8676f43-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99067","version":1,"revisionDate":"2026-10-25T01:05:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4d2fa919-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000be34736","releaseDate":"2026-10-25T01:04:58-07:00","cveNumber":"CVE-2026-99063","cveTitle":"dm ioctl: don't let data_start run past the buffer","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:29-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99063","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99063","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99063","version":3,"revisionDate":"2026-10-26T14:48:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"649deb49-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99063","version":2,"revisionDate":"2026-10-25T01:06:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b25c6d3d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99063","version":1,"revisionDate":"2026-10-25T01:04:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"94971513-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000041cc967b","releaseDate":"2026-10-25T01:04:55-07:00","cveNumber":"CVE-2026-99061","cveTitle":"wifi: brcmfmac: fix P2P device removal race in brcmf_detach()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:24-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99061","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99061","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99061","version":3,"revisionDate":"2026-10-26T14:48:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d29ceb49-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99061","version":2,"revisionDate":"2026-10-25T01:06:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"985c6d3d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99061","version":1,"revisionDate":"2026-10-25T01:04:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"85971513-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006a275b66","releaseDate":"2026-10-25T01:04:53-07:00","cveNumber":"CVE-2026-99059","cveTitle":"wireguard: noise: reject response consumption after intermediate initiation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99059","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99059","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.7","temporalScore":"7.7","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99059","version":3,"revisionDate":"2026-10-26T14:48:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"240ed943-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99059","version":2,"revisionDate":"2026-10-25T01:05:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"19215837-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99059","version":1,"revisionDate":"2026-10-25T01:04:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"78971513-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000cfb2b3c3","releaseDate":"2026-10-25T01:04:51-07:00","cveNumber":"CVE-2026-99058","cveTitle":"workqueue: Fix NULL current_pwq deref in chained work check","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:17-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99058","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99058","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99058","version":3,"revisionDate":"2026-10-26T14:48:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ec0dd943-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99058","version":2,"revisionDate":"2026-10-25T01:05:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"06215837-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99058","version":1,"revisionDate":"2026-10-25T01:04:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6b971513-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a010aaab","releaseDate":"2026-10-25T01:04:49-07:00","cveNumber":"CVE-2026-99057","cveTitle":"xen/netfront: don't leak the skb when xennet_fill_frags() fails","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:12-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99057","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99057","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99057","version":3,"revisionDate":"2026-10-26T14:48:12-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8c0dd943-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99057","version":2,"revisionDate":"2026-10-25T01:05:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fc205837-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99057","version":1,"revisionDate":"2026-10-25T01:04:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5e971513-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000059c0209","releaseDate":"2026-10-25T01:04:46-07:00","cveNumber":"CVE-2026-99056","cveTitle":"strparser: make sure __strp_recv isn't running before tearing down the parser","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:08-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99056","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99056","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99056","version":3,"revisionDate":"2026-10-26T14:48:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d9fca43d-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99056","version":2,"revisionDate":"2026-10-25T01:05:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ef205837-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99056","version":1,"revisionDate":"2026-10-25T01:04:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3c9ecf0c-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00003b85514e","releaseDate":"2026-10-25T01:04:44-07:00","cveNumber":"CVE-2026-99054","cveTitle":"tipc: destroy topsrv workqueues before closing connections","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:04-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99054","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99054","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99054","version":3,"revisionDate":"2026-10-26T14:48:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cafca43d-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99054","version":2,"revisionDate":"2026-10-25T01:05:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8a853131-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99054","version":1,"revisionDate":"2026-10-25T01:04:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2e9ecf0c-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000ce34736","releaseDate":"2026-10-25T01:04:41-07:00","cveNumber":"CVE-2026-99053","cveTitle":"tipc: hold a reference to nodes found by link name","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:01-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99053","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99053","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99053","version":3,"revisionDate":"2026-10-26T14:48:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"080ca337-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99053","version":2,"revisionDate":"2026-10-25T01:05:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7f853131-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99053","version":1,"revisionDate":"2026-10-25T01:04:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"219ecf0c-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000716ea093","releaseDate":"2026-10-25T01:04:39-07:00","cveNumber":"CVE-2026-99052","cveTitle":"selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:56-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99052","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99052","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99052","version":3,"revisionDate":"2026-10-26T14:47:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f70ba337-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99052","version":2,"revisionDate":"2026-10-25T01:05:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"72853131-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99052","version":1,"revisionDate":"2026-10-25T01:04:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"149ecf0c-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006b275b66","releaseDate":"2026-10-25T01:04:36-07:00","cveNumber":"CVE-2026-99049","cveTitle":"gpio: xilinx: fix runtime PM leak on request error path","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99049","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99049","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99049","version":3,"revisionDate":"2026-10-26T14:47:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"de0ba337-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99049","version":2,"revisionDate":"2026-10-25T01:05:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"68853131-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99049","version":1,"revisionDate":"2026-10-25T01:04:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4c97bc06-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000d7f9f8f0","releaseDate":"2026-10-25T01:04:33-07:00","cveNumber":"CVE-2026-99045","cveTitle":"ibmveth: h_free logical LAN on open-fail after register","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99045","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99045","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99045","version":3,"revisionDate":"2026-10-26T14:47:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"df9daa31-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99045","version":2,"revisionDate":"2026-10-25T01:05:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"eb8d382b-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99045","version":1,"revisionDate":"2026-10-25T01:04:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3d97bc06-10d0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99045","version":4,"revisionDate":"2026-10-28T01:50:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0d2a08e8-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000de34736","releaseDate":"2026-10-25T01:04:30-07:00","cveNumber":"CVE-2026-99043","cveTitle":"ice: fix metadata_dst refcount handling on representor teardown","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99043","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99043","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99043","version":3,"revisionDate":"2026-10-26T14:47:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"679daa31-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99043","version":2,"revisionDate":"2026-10-25T01:05:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c2bf3825-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99043","version":1,"revisionDate":"2026-10-25T01:04:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3097bc06-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000043cc967b","releaseDate":"2026-10-25T01:04:25-07:00","cveNumber":"CVE-2026-99041","cveTitle":"ip6_gre: remove obsolete ERSPAN PMTU update","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99041","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99041","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99041","version":3,"revisionDate":"2026-10-26T14:47:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ebdd972b-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99041","version":2,"revisionDate":"2026-10-25T01:05:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"babf3825-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99041","version":1,"revisionDate":"2026-10-25T01:04:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"afa3e1ff-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a857efd8","releaseDate":"2026-10-25T01:04:21-07:00","cveNumber":"CVE-2026-99040","cveTitle":"KEYS: Fix add_key() race with keyring restriction","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:34-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99040","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99040","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99040","version":3,"revisionDate":"2026-10-26T14:47:34-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cfdd972b-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99040","version":2,"revisionDate":"2026-10-25T01:05:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"acbf3825-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99040","version":1,"revisionDate":"2026-10-25T01:04:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a2a3e1ff-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006c275b66","releaseDate":"2026-10-25T01:04:18-07:00","cveNumber":"CVE-2026-99039","cveTitle":"memstick: core: wait for request completion before freeing card","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99039","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99039","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99039","version":3,"revisionDate":"2026-10-26T14:47:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b4dd972b-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99039","version":2,"revisionDate":"2026-10-25T01:05:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a0bf3825-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99039","version":1,"revisionDate":"2026-10-25T01:04:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95a3e1ff-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000d1b2b3c3","releaseDate":"2026-10-25T01:04:16-07:00","cveNumber":"CVE-2026-99038","cveTitle":"memstick: rtsx_usb_ms: complete requests after eject instead of dropping them","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:09-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99038","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99038","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99038","version":3,"revisionDate":"2026-10-26T14:47:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95e59525-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99038","version":2,"revisionDate":"2026-10-25T01:05:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bed9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99038","version":1,"revisionDate":"2026-10-25T01:04:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e266e8f9-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99038","version":4,"revisionDate":"2026-10-28T01:50:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2e0ee7e1-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a210aaab","releaseDate":"2026-10-25T01:04:14-07:00","cveNumber":"CVE-2026-99037","cveTitle":"dm-crypt: reject the lmk IV mode with AEAD ciphers","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99037","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99037","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99037","version":3,"revisionDate":"2026-10-26T14:47:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"69e59525-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99037","version":2,"revisionDate":"2026-10-25T01:05:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b2d9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99037","version":1,"revisionDate":"2026-10-25T01:04:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d566e8f9-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000079c0209","releaseDate":"2026-10-25T01:04:08-07:00","cveNumber":"CVE-2026-99036","cveTitle":"dm: fix reading free memory in do_resume","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:19-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99036","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99036","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99036","version":3,"revisionDate":"2026-10-26T14:47:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"04469b1f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99036","version":2,"revisionDate":"2026-10-25T01:05:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a9d9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99036","version":1,"revisionDate":"2026-10-25T01:04:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c866e8f9-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000d8f9f8f0","releaseDate":"2026-10-25T01:04:04-07:00","cveNumber":"CVE-2026-99035","cveTitle":"mmc: mtk-sd: Cancel request timeout work on remove","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:15-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99035","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99035","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99035","version":3,"revisionDate":"2026-10-26T14:47:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"46459b1f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99035","version":2,"revisionDate":"2026-10-25T01:05:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9ed9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99035","version":1,"revisionDate":"2026-10-25T01:04:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c393cbf3-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00003d85514e","releaseDate":"2026-10-25T01:04:01-07:00","cveNumber":"CVE-2026-99034","cveTitle":"mmc: sdhci-sprd: disable runtime PM on remove","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:11-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99034","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99034","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99034","version":3,"revisionDate":"2026-10-26T14:47:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ff449b1f-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99034","version":2,"revisionDate":"2026-10-25T01:05:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8dd9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99034","version":1,"revisionDate":"2026-10-25T01:04:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b693cbf3-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000ee34736","releaseDate":"2026-10-25T01:03:57-07:00","cveNumber":"CVE-2026-99033","cveTitle":"net/packet: guard the ll header push in packet_rcv_spkt()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:07-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99033","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99033","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99033","version":3,"revisionDate":"2026-10-26T14:47:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"63c98f19-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99033","version":2,"revisionDate":"2026-10-25T01:05:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84d9361f-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99033","version":1,"revisionDate":"2026-10-25T01:03:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a993cbf3-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000736ea093","releaseDate":"2026-10-25T01:03:54-07:00","cveNumber":"CVE-2026-99032","cveTitle":"net/smc: protect clcsock lifetime in smc_getname","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:02-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99032","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99032","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99032","version":3,"revisionDate":"2026-10-26T14:47:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0dc98f19-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99032","version":2,"revisionDate":"2026-10-25T01:05:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b6c83b19-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99032","version":1,"revisionDate":"2026-10-25T01:03:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1dc2c6ed-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000044cc967b","releaseDate":"2026-10-25T01:03:52-07:00","cveNumber":"CVE-2026-99031","cveTitle":"net: bridge: avoid recursive multicast port cleanup","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:58-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99031","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99031","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99031","version":3,"revisionDate":"2026-10-26T14:46:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9d5d3313-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99031","version":2,"revisionDate":"2026-10-25T01:05:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a8c83b19-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99031","version":1,"revisionDate":"2026-10-25T01:03:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"10c2c6ed-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a310aaab","releaseDate":"2026-10-25T01:03:49-07:00","cveNumber":"CVE-2026-99027","cveTitle":"net: team: stop reusing skb after queue override","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:05-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99027","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99027","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99027","version":3,"revisionDate":"2026-10-26T14:46:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"895d3313-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99027","version":2,"revisionDate":"2026-10-25T01:04:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"77ee1013-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99027","version":1,"revisionDate":"2026-10-25T01:03:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"03c2c6ed-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99027","version":4,"revisionDate":"2026-10-28T01:50:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0e0ee7e1-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000089c0209","releaseDate":"2026-10-25T01:03:47-07:00","cveNumber":"CVE-2026-99026","cveTitle":"net: team: free skb when broadcast has no txable port","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99026","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99026","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99026","version":3,"revisionDate":"2026-10-26T14:46:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c342380d-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99026","version":2,"revisionDate":"2026-10-25T01:04:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6aee1013-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99026","version":1,"revisionDate":"2026-10-25T01:03:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f6c1c6ed-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99026","version":4,"revisionDate":"2026-10-28T01:50:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fc0de7e1-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000d9f9f8f0","releaseDate":"2026-10-25T01:03:45-07:00","cveNumber":"CVE-2026-99025","cveTitle":"openvswitch: fix soft lockup in the netlink flow dump","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:46-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99025","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99025","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99025","version":3,"revisionDate":"2026-10-26T14:46:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba42380d-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99025","version":2,"revisionDate":"2026-10-25T01:04:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5fee1013-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99025","version":1,"revisionDate":"2026-10-25T01:03:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6aa1c4e7-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00003e85514e","releaseDate":"2026-10-25T01:03:42-07:00","cveNumber":"CVE-2026-99024","cveTitle":"optee: register TEE devices only once fully initialized","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:50:01-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99024","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99024","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99024","version":3,"revisionDate":"2026-10-26T14:46:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8042380d-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99024","version":2,"revisionDate":"2026-10-25T01:04:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"57ee1013-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99024","version":1,"revisionDate":"2026-10-25T01:03:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5da1c4e7-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99024","version":4,"revisionDate":"2026-10-28T01:50:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f80de7e1-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000746ea093","releaseDate":"2026-10-25T01:03:38-07:00","cveNumber":"CVE-2026-99022","cveTitle":"regulator: ltc3676: don't read the write-only HRST and CLIRQ registers","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:58-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99022","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99022","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99022","version":3,"revisionDate":"2026-10-26T14:46:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"983a4207-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99022","version":2,"revisionDate":"2026-10-25T01:04:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1c8b180d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99022","version":1,"revisionDate":"2026-10-25T01:03:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"50a1c4e7-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99022","version":4,"revisionDate":"2026-10-28T01:49:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1001c6db-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000045cc967b","releaseDate":"2026-10-25T01:03:35-07:00","cveNumber":"CVE-2026-99021","cveTitle":"regulator: of: fill in supply names in of_regulator_bulk_get_all()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:32-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99021","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99021","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99021","version":3,"revisionDate":"2026-10-26T14:46:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4a3a4207-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99021","version":2,"revisionDate":"2026-10-25T01:04:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"148b180d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99021","version":1,"revisionDate":"2026-10-25T01:03:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c325c4e1-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006e275b66","releaseDate":"2026-10-25T01:03:31-07:00","cveNumber":"CVE-2026-99019","cveTitle":"scsi: ch: Do not keep references to data transfer element devices","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:57-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99019","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99019","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99019","version":3,"revisionDate":"2026-10-26T14:46:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b3c13d01-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99019","version":2,"revisionDate":"2026-10-25T01:04:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fd8a180d-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99019","version":1,"revisionDate":"2026-10-25T01:03:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b625c4e1-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99019","version":4,"revisionDate":"2026-10-28T01:49:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f000c6db-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000daf9f8f0","releaseDate":"2026-10-25T01:03:27-07:00","cveNumber":"CVE-2026-99015","cveTitle":"Bluetooth: hci_sock: Serialize dead-device detachment","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99015","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99015","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99015","version":3,"revisionDate":"2026-10-26T14:46:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9bc13d01-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99015","version":2,"revisionDate":"2026-10-25T01:04:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d781eb06-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99015","version":1,"revisionDate":"2026-10-25T01:03:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a925c4e1-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000756ea093","releaseDate":"2026-10-25T01:03:24-07:00","cveNumber":"CVE-2026-99012","cveTitle":"Bluetooth: ISO: Serialize concurrent connect calls","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:55-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99012","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99012","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99012","version":3,"revisionDate":"2026-10-26T14:46:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8bc13d01-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99012","version":2,"revisionDate":"2026-10-25T01:04:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"65e4e600-10d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99012","version":1,"revisionDate":"2026-10-25T01:03:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"587660db-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-99012","version":4,"revisionDate":"2026-10-28T01:49:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e800c6db-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000ab57efd8","releaseDate":"2026-10-25T01:03:22-07:00","cveNumber":"CVE-2026-99010","cveTitle":"Bluetooth: RFCOMM: free the skb when the DLC has no owner","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:16-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99010","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99010","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99010","version":3,"revisionDate":"2026-10-26T14:46:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"23d91bfb-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99010","version":2,"revisionDate":"2026-10-25T01:04:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8d07cdfa-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99010","version":1,"revisionDate":"2026-10-25T01:03:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4b7660db-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006f275b66","releaseDate":"2026-10-25T01:03:19-07:00","cveNumber":"CVE-2026-99009","cveTitle":"Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:11-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99009","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99009","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99009","version":3,"revisionDate":"2026-10-26T14:46:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dbd81bfb-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99009","version":2,"revisionDate":"2026-10-25T01:04:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a07cdfa-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99009","version":1,"revisionDate":"2026-10-25T01:03:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3e7660db-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000d4b2b3c3","releaseDate":"2026-10-25T01:03:16-07:00","cveNumber":"CVE-2026-99008","cveTitle":"Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:07-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99008","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99008","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99008","version":3,"revisionDate":"2026-10-26T14:46:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ce07cbf4-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99008","version":2,"revisionDate":"2026-10-25T01:04:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6d07cdfa-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99008","version":1,"revisionDate":"2026-10-25T01:03:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"317660db-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000a510aaab","releaseDate":"2026-10-25T01:03:13-07:00","cveNumber":"CVE-2026-99007","cveTitle":"drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99007","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99007","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99007","version":3,"revisionDate":"2026-10-26T14:46:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c507cbf4-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99007","version":2,"revisionDate":"2026-10-25T01:04:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5a07cdfa-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99007","version":1,"revisionDate":"2026-10-25T01:03:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4e8d40d5-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000a9c0209","releaseDate":"2026-10-25T01:03:11-07:00","cveNumber":"CVE-2026-99006","cveTitle":"drm/i915/gem: Prevent overstepping exec array boundary","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:58-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99006","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99006","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99006","version":3,"revisionDate":"2026-10-26T14:45:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"05e6c1ee-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99006","version":2,"revisionDate":"2026-10-25T01:04:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e228d2f4-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99006","version":1,"revisionDate":"2026-10-25T01:03:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"418d40d5-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000dbf9f8f0","releaseDate":"2026-10-25T01:03:09-07:00","cveNumber":"CVE-2026-99005","cveTitle":"drm/i915/gt: Unmask interrupts only when ACTIVE is true","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:54-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99005","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99005","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99005","version":3,"revisionDate":"2026-10-26T14:45:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d5e5c1ee-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99005","version":2,"revisionDate":"2026-10-25T01:04:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d728d2f4-0fd0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99005","version":1,"revisionDate":"2026-10-25T01:03:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"348d40d5-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000766ea093","releaseDate":"2026-10-25T01:03:06-07:00","cveNumber":"CVE-2026-99002","cveTitle":"drm/vmwgfx: validate pitch coming from userspace","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:49-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-99002","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99002","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-99002","version":3,"revisionDate":"2026-10-26T14:45:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d4e4c1ee-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-99002","version":2,"revisionDate":"2026-10-26T01:04:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6f05fa2f-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-99002","version":1,"revisionDate":"2026-10-25T01:03:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"278d40d5-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000953d0b9a","releaseDate":"2026-10-25T01:03:03-07:00","cveNumber":"CVE-2026-98996","cveTitle":"fs: don't silently unmount busy mounts","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:46-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98996","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98996","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98996","version":3,"revisionDate":"2026-10-26T14:45:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7e89c9e8-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98996","version":2,"revisionDate":"2026-10-26T01:04:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1c17c923-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98996","version":1,"revisionDate":"2026-10-25T01:03:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"55a434cf-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000669b0182","releaseDate":"2026-10-25T01:03:01-07:00","cveNumber":"CVE-2026-98993","cveTitle":"namespace: don't inherit MNT_UMOUNT in clone_mnt()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98993","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98993","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98993","version":3,"revisionDate":"2026-10-26T14:45:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3689c9e8-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98993","version":2,"revisionDate":"2026-10-26T01:04:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0517c923-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98993","version":1,"revisionDate":"2026-10-25T01:03:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"48a434cf-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000110a924","releaseDate":"2026-10-25T01:02:58-07:00","cveNumber":"CVE-2026-98992","cveTitle":"namespace: don't copy an unmounted mount tree","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:36-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98992","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98992","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98992","version":3,"revisionDate":"2026-10-26T14:45:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f82ad1e2-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98992","version":2,"revisionDate":"2026-10-26T01:04:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fd16c923-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98992","version":1,"revisionDate":"2026-10-25T01:02:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3ba434cf-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000037f9f769","releaseDate":"2026-10-25T01:02:56-07:00","cveNumber":"CVE-2026-98990","cveTitle":"namespace: check a submount for references right before unmounting it","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98990","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98990","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98990","version":3,"revisionDate":"2026-10-26T14:45:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ae2ad1e2-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98990","version":2,"revisionDate":"2026-10-26T01:04:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dd84d01d-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98990","version":1,"revisionDate":"2026-10-25T01:02:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2ea434cf-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000073298cdc","releaseDate":"2026-10-25T01:02:54-07:00","cveNumber":"CVE-2026-98989","cveTitle":"namespace: check a recursive bind mount for mount namespace loops","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:27-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98989","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98989","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98989","version":3,"revisionDate":"2026-10-26T14:45:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8e558cdc-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98989","version":2,"revisionDate":"2026-10-26T01:04:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d584d01d-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98989","version":1,"revisionDate":"2026-10-25T01:02:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c61118c9-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00006cc5b560","releaseDate":"2026-10-25T01:02:24-07:00","cveNumber":"CVE-2026-115379","cveTitle":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:56-07:00","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"mitreText":"CVE-2026-115379","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115379","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"5.7","temporalScore":"5.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115379","version":3,"revisionDate":"2026-10-28T01:45:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8a3eb84e-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115379","version":1,"revisionDate":"2026-10-25T01:02:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c239d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-115379","version":2,"revisionDate":"2026-10-27T01:46:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e7fa002f-a8d1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000bd172f77","releaseDate":"2026-10-25T01:02:21-07:00","cveNumber":"CVE-2026-97229","cveTitle":"Integer Overflow or Wraparound in GitLab","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:55-07:00","cweList":["CWE-190: Integer Overflow or Wraparound"],"cweDetailsListForSearch":["cwe: CWE-190: Integer Overflow or Wraparound","cweUrl: https://cwe.mitre.org/data/definitions/190.html"],"mitreText":"CVE-2026-97229","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97229","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitLab","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"10.0","temporalScore":"10.0","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"GitLab","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-190: Integer Overflow or Wraparound","https://cwe.mitre.org/data/definitions/190.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-97229","version":3,"revisionDate":"2026-10-27T01:03:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b253f33c-a2d1-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-97229","version":5,"revisionDate":"2026-10-28T01:45:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7c3eb84e-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-97229","version":2.1,"revisionDate":"2026-10-26T14:50:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3feb2693-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-97229","version":2,"revisionDate":"2026-10-25T14:44:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0fd6f29e-82d0-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-97229","version":1,"revisionDate":"2026-10-25T01:02:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"815fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-97229","version":4,"revisionDate":"2026-10-27T01:46:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c862a628-a8d1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000c4d3c07e","releaseDate":"2026-10-25T01:02:18-07:00","cveNumber":"CVE-2026-110264","cveTitle":"Integer Overflow or Wraparound in GitLab","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:50-07:00","cweList":["CWE-190: Integer Overflow or Wraparound"],"cweDetailsListForSearch":["cwe: CWE-190: Integer Overflow or Wraparound","cweUrl: https://cwe.mitre.org/data/definitions/190.html"],"mitreText":"CVE-2026-110264","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110264","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitLab","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"10.0","temporalScore":"10.0","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"GitLab","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-190: Integer Overflow or Wraparound","https://cwe.mitre.org/data/definitions/190.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110264","version":4,"revisionDate":"2026-10-28T01:45:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"80deba48-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-110264","version":2.1,"revisionDate":"2026-10-26T14:50:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"38eb2693-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-110264","version":2,"revisionDate":"2026-10-25T14:44:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0ad6f29e-82d0-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-110264","version":1,"revisionDate":"2026-10-25T01:02:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"685fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-110264","version":3,"revisionDate":"2026-10-27T01:46:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"aa62a628-a8d1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00001781a230","releaseDate":"2026-10-25T01:02:15-07:00","cveNumber":"CVE-2026-115392","cveTitle":"Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:45-07:00","cweList":["CWE-61: UNIX Symbolic Link (Symlink) Following"],"cweDetailsListForSearch":["cwe: CWE-61: UNIX Symbolic Link (Symlink) Following","cweUrl: https://cwe.mitre.org/data/definitions/61.html"],"mitreText":"CVE-2026-115392","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115392","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.9","temporalScore":"7.9","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-61: UNIX Symbolic Link (Symlink) Following","https://cwe.mitre.org/data/definitions/61.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115392","version":3,"revisionDate":"2026-10-28T01:45:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6cdeba48-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115392","version":2,"revisionDate":"2026-10-26T14:50:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"24eb2693-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-115392","version":1,"revisionDate":"2026-10-25T01:02:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"535fcab6-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00008924bd74","releaseDate":"2026-10-25T01:02:13-07:00","cveNumber":"CVE-2026-112085","cveTitle":"webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:43-07:00","cweList":["CWE-346: Origin Validation Error"],"cweDetailsListForSearch":["cwe: CWE-346: Origin Validation Error","cweUrl: https://cwe.mitre.org/data/definitions/346.html"],"mitreText":"CVE-2026-112085","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112085","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"openjs","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.2","temporalScore":"8.2","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","vectorStringSource":"openjs","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-346: Origin Validation Error","https://cwe.mitre.org/data/definitions/346.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-112085","version":3,"revisionDate":"2026-10-28T01:45:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"69deba48-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-112085","version":2,"revisionDate":"2026-10-26T01:46:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dc0228fa-ded0-f111-a059-7ced8d6dc516"},{"cveNumber":"CVE-2026-112085","version":1,"revisionDate":"2026-10-25T01:02:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b92bc5b0-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00002dc4ef57","releaseDate":"2026-10-25T01:02:11-07:00","cveNumber":"CVE-2026-91403","cveTitle":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in th","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:41-07:00","cweList":["CWE-327: Use of a Broken or Risky Cryptographic Algorithm"],"cweDetailsListForSearch":["cwe: CWE-327: Use of a Broken or Risky Cryptographic Algorithm","cweUrl: https://cwe.mitre.org/data/definitions/327.html"],"mitreText":"CVE-2026-91403","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-91403","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"oracle","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.1","temporalScore":"9.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"oracle","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-327: Use of a Broken or Risky Cryptographic Algorithm","https://cwe.mitre.org/data/definitions/327.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-91403","version":3,"revisionDate":"2026-10-28T01:45:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"db5db642-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-91403","version":2,"revisionDate":"2026-10-26T01:45:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d30228fa-ded0-f111-a059-7ced8d6dc516"},{"cveNumber":"CVE-2026-91403","version":1,"revisionDate":"2026-10-25T01:02:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a42bc5b0-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000df15a2b1","releaseDate":"2026-10-25T01:02:08-07:00","cveNumber":"CVE-2026-111181","cveTitle":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:38-07:00","cweList":["CWE-248: Uncaught Exception"],"cweDetailsListForSearch":["cwe: CWE-248: Uncaught Exception","cweUrl: https://cwe.mitre.org/data/definitions/248.html"],"mitreText":"CVE-2026-111181","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111181","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"openjs","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"openjs","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-248: Uncaught Exception","https://cwe.mitre.org/data/definitions/248.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-111181","version":3,"revisionDate":"2026-10-28T01:45:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8b5db642-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-111181","version":2,"revisionDate":"2026-10-26T01:45:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7e29eaf3-ded0-f111-a059-7ced8d6dc516"},{"cveNumber":"CVE-2026-111181","version":1,"revisionDate":"2026-10-25T01:02:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"562bc5b0-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00004ff949d3","releaseDate":"2026-10-25T01:02:05-07:00","cveNumber":"CVE-2026-105481","cveTitle":"A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931.\n\nThe guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event loop polls for I/O. If an unsolicited response has already reached the socket but has not been read yet when the socket is handed to a new request, for example because the event loop was busy with synchronous work, the guard is removed without seeing it and the data is parsed as the response to the new request.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:36-07:00","cweList":["CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"],"cweDetailsListForSearch":["cwe: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition","cweUrl: https://cwe.mitre.org/data/definitions/367.html"],"mitreText":"CVE-2026-105481","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105481","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.5","temporalScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition","https://cwe.mitre.org/data/definitions/367.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-105481","version":3,"revisionDate":"2026-10-28T01:45:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"165db642-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-105481","version":2,"revisionDate":"2026-10-26T14:50:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0beb2693-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-105481","version":1,"revisionDate":"2026-10-25T01:02:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"412bc5b0-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000494bdf3","releaseDate":"2026-10-25T01:02:02-07:00","cveNumber":"CVE-2026-106072","cveTitle":"A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`.\n\n`tls.checkServerIdentity()` did not classify these hosts as IP addresses, but normalized them to their canonical form and matched the result against the certificate DNS names. A certificate containing `DNS:127.0.0.1` and no `IP Address:127.0.0.1` SAN was therefore accepted, while the same certificate is correctly rejected for `127.0.0.1`. Exploitation requires a certificate with a numeric DNS SAN issued by a CA trusted by the client, and a platform resolver that accepts these spellings, such as glibc.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:31-07:00","cweList":["CWE-295: Improper Certificate Validation"],"cweDetailsListForSearch":["cwe: CWE-295: Improper Certificate Validation","cweUrl: https://cwe.mitre.org/data/definitions/295.html"],"mitreText":"CVE-2026-106072","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106072","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"6.7","temporalScore":"6.7","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-295: Improper Certificate Validation","https://cwe.mitre.org/data/definitions/295.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-106072","version":3,"revisionDate":"2026-10-28T01:45:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"31eeb83c-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-106072","version":2,"revisionDate":"2026-10-26T14:50:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4eeaf78c-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-106072","version":1,"revisionDate":"2026-10-25T01:02:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b56ca9aa-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000294bdf3","releaseDate":"2026-10-25T01:01:59-07:00","cveNumber":"CVE-2026-106074","cveTitle":"A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.\n\nIf any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:27-07:00","cweList":["CWE-330: Use of Insufficiently Random Values"],"cweDetailsListForSearch":["cwe: CWE-330: Use of Insufficiently Random Values","cweUrl: https://cwe.mitre.org/data/definitions/330.html"],"mitreText":"CVE-2026-106074","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106074","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"4.8","temporalScore":"4.8","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-330: Use of Insufficiently Random Values","https://cwe.mitre.org/data/definitions/330.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-106074","version":3,"revisionDate":"2026-10-28T01:45:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84edb83c-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-106074","version":2,"revisionDate":"2026-10-26T14:50:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"36eaf78c-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-106074","version":1,"revisionDate":"2026-10-25T01:01:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"986ca9aa-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000641f1651","releaseDate":"2026-10-25T01:01:56-07:00","cveNumber":"CVE-2026-106069","cveTitle":"A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`.\n\n`tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the operating system resolver, which on some platforms such as macOS reads it as decimal (`127.0.0.1`). A server at the connected address can then be authenticated with a certificate issued for another IP address.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:23-07:00","cweList":["CWE-295: Improper Certificate Validation"],"cweDetailsListForSearch":["cwe: CWE-295: Improper Certificate Validation","cweUrl: https://cwe.mitre.org/data/definitions/295.html"],"mitreText":"CVE-2026-106069","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106069","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.4","temporalScore":"7.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-295: Improper Certificate Validation","https://cwe.mitre.org/data/definitions/295.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-106069","version":3,"revisionDate":"2026-10-28T01:45:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6fedb83c-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-106069","version":2,"revisionDate":"2026-10-26T14:50:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2beffc86-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-106069","version":1,"revisionDate":"2026-10-25T01:01:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7e6ca9aa-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000096e3fc12","releaseDate":"2026-10-25T01:01:54-07:00","cveNumber":"CVE-2026-114613","cveTitle":"MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-31T14:47:58-07:00","cweList":["CWE-401: Missing Release of Memory after Effective Lifetime"],"cweDetailsListForSearch":["cwe: CWE-401: Missing Release of Memory after Effective Lifetime","cweUrl: https://cwe.mitre.org/data/definitions/401.html"],"mitreText":"CVE-2026-114613","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114613","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"GitHub_M","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"GitHub_M","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-401: Missing Release of Memory after Effective Lifetime","https://cwe.mitre.org/data/definitions/401.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-114613","version":2,"revisionDate":"2026-10-26T14:50:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"baeefc86-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-114613","version":3,"revisionDate":"2026-10-31T14:47:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6db4820b-3ad5-f111-a059-7ced8d6f0a57"},{"cveNumber":"CVE-2026-114613","version":1,"revisionDate":"2026-10-25T01:01:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"666ca9aa-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00004df949d3","releaseDate":"2026-10-25T01:01:49-07:00","cveNumber":"CVE-2026-105483","cveTitle":"A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`\uff11\uff12\uff17.0.0.1`).\n\n`tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name instead. A certificate containing `DNS:127.0.0.1` or `DNS:*.0.0.1` could therefore be accepted for an IP endpoint it was not issued for. This is a regression introduced after the fix for CVE-2026-48618.\n\nThis vulnerability affects Node.js **26.x** and **24.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:18-07:00","cweList":["CWE-295: Improper Certificate Validation"],"cweDetailsListForSearch":["cwe: CWE-295: Improper Certificate Validation","cweUrl: https://cwe.mitre.org/data/definitions/295.html"],"mitreText":"CVE-2026-105483","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105483","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.4","temporalScore":"7.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-295: Improper Certificate Validation","https://cwe.mitre.org/data/definitions/295.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-105483","version":3,"revisionDate":"2026-10-28T01:45:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"45416a36-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-105483","version":2,"revisionDate":"2026-10-26T14:50:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8deefc86-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-105483","version":1,"revisionDate":"2026-10-25T01:01:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fbeaaba4-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00004cf949d3","releaseDate":"2026-10-25T01:01:47-07:00","cveNumber":"CVE-2026-105482","cveTitle":"A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options.\r\n\r\nBecause the name is passed to c-ares as a C string, resolving attacker.example\\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate a hostname, for example against a domain allowlist, and then resolve it with dns.resolve*() can act on records for a different name than the one they validated.\r\n\r\nThis vulnerability affects Node.js 26.x, 24.x, and 22.x.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:13-07:00","cweList":["CWE-284: Improper Access Control"],"cweDetailsListForSearch":["cwe: CWE-284: Improper Access Control","cweUrl: https://cwe.mitre.org/data/definitions/284.html"],"mitreText":"CVE-2026-105482","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105482","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.4","temporalScore":"7.4","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-284: Improper Access Control","https://cwe.mitre.org/data/definitions/284.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-105482","version":3,"revisionDate":"2026-10-28T01:45:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"35416a36-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-105482","version":2,"revisionDate":"2026-10-26T14:50:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"21830481-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-105482","version":1,"revisionDate":"2026-10-25T01:01:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e3eaaba4-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000594bdf3","releaseDate":"2026-10-25T01:01:44-07:00","cveNumber":"CVE-2026-106073","cveTitle":"A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`.\n\nAs a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:08-07:00","cweList":["CWE-284: Improper Access Control"],"cweDetailsListForSearch":["cwe: CWE-284: Improper Access Control","cweUrl: https://cwe.mitre.org/data/definitions/284.html"],"mitreText":"CVE-2026-106073","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106073","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.3","temporalScore":"3.3","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-284: Improper Access Control","https://cwe.mitre.org/data/definitions/284.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-106073","version":3,"revisionDate":"2026-10-28T01:45:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a834b30-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-106073","version":2,"revisionDate":"2026-10-26T14:49:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b4820481-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-106073","version":1,"revisionDate":"2026-10-25T01:01:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c3eaaba4-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00000794bdf3","releaseDate":"2026-10-25T01:01:42-07:00","cveNumber":"CVE-2026-106071","cveTitle":"A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.\n\nWhen the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as a match. For example, `--allow-fs-read=/etc/passwd.*` also allows reading `/etc/passwd`. This requires the wildcard grant to sit directly under the root of the permission tree, for example when it is the only grant for that scope. This is a different root cause from CVE-2026-58043.\n\nThis vulnerability affects Node.js **26.x**.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:04-07:00","cweList":["CWE-284: Improper Access Control"],"cweDetailsListForSearch":["cwe: CWE-284: Improper Access Control","cweUrl: https://cwe.mitre.org/data/definitions/284.html"],"mitreText":"CVE-2026-106071","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106071","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"hackerone","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","vectorStringSource":"hackerone","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-284: Improper Access Control","https://cwe.mitre.org/data/definitions/284.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-106071","version":3,"revisionDate":"2026-10-28T01:45:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6a834b30-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-106071","version":2,"revisionDate":"2026-10-26T14:49:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e1fcff7a-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-106071","version":1,"revisionDate":"2026-10-25T01:01:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"072a6e9e-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000da22ac48","releaseDate":"2026-10-25T01:01:40-07:00","cveNumber":"CVE-2026-115449","cveTitle":"Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:44:58-07:00","cweList":["CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"],"cweDetailsListForSearch":["cwe: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","cweUrl: https://cwe.mitre.org/data/definitions/200.html"],"mitreText":"CVE-2026-115449","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115449","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"redhat","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"3.5","temporalScore":"3.5","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","vectorStringSource":"redhat","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","https://cwe.mitre.org/data/definitions/200.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115449","version":2,"revisionDate":"2026-10-28T01:44:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8f894b2a-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115449","version":1,"revisionDate":"2026-10-25T01:01:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"eb296e9e-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000b431b766","releaseDate":"2026-10-25T01:01:37-07:00","cveNumber":"CVE-2026-110354","cveTitle":"HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without making progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client disconnects, and repeated requests can consume all worker threads until the process is restarted.","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:45:10-07:00","cweList":["CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"],"cweDetailsListForSearch":["cwe: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')","cweUrl: https://cwe.mitre.org/data/definitions/835.html"],"mitreText":"CVE-2026-110354","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110354","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"mitre","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"mitre","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')","https://cwe.mitre.org/data/definitions/835.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-110354","version":4,"revisionDate":"2026-10-30T01:45:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"29acb186-03d4-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-110354","version":2,"revisionDate":"2026-10-26T14:49:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c1fcff7a-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-110354","version":3,"revisionDate":"2026-10-28T14:45:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb458f22-ded2-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-110354","version":1,"revisionDate":"2026-10-25T01:01:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d4296e9e-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00002fb2b23c","releaseDate":"2026-10-24T01:11:01-07:00","cveNumber":"CVE-2026-98985","cveTitle":"namespace: check the mounts before reading their parents in pivot_root()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:45:23-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98985","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98985","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98985","version":1,"revisionDate":"2026-10-24T01:11:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba6ba8c0-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98985","version":3,"revisionDate":"2026-10-26T14:45:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"64558cdc-4bd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98985","version":2,"revisionDate":"2026-10-25T01:02:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b91118c9-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000ca265adf","releaseDate":"2026-10-24T01:10:58-07:00","cveNumber":"CVE-2026-98984","cveTitle":"dcache: don't put a mountpoint on a dentry that's being removed","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98984","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98984","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98984","version":1,"revisionDate":"2026-10-24T01:10:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1b6ba8c0-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98984","version":2,"revisionDate":"2026-10-25T01:02:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b11118c9-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98984","version":3,"revisionDate":"2026-10-26T14:49:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"26cf6461-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00009b8450c7","releaseDate":"2026-10-24T01:10:50-07:00","cveNumber":"CVE-2026-98981","cveTitle":"namespace: unhash a dentry before detaching the mounts on it","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:58-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98981","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98981","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98981","version":1,"revisionDate":"2026-10-24T01:10:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"121398ba-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98981","version":2,"revisionDate":"2026-10-25T01:02:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a91118c9-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98981","version":3,"revisionDate":"2026-10-26T14:48:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"09fe265b-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000036f9f769","releaseDate":"2026-10-24T01:10:46-07:00","cveNumber":"CVE-2026-98980","cveTitle":"namei: don't reveal overmounted entries in refwalk","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:54-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98980","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98980","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98980","version":1,"revisionDate":"2026-10-24T01:10:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"021398ba-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98980","version":2,"revisionDate":"2026-10-25T01:02:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a11118c9-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98980","version":3,"revisionDate":"2026-10-26T14:48:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f9fd265b-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000066298cdc","releaseDate":"2026-10-24T01:10:44-07:00","cveNumber":"CVE-2026-98979","cveTitle":"namespace: refuse an automount below a mount that is in no namespace","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:51-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98979","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98979","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98979","version":1,"revisionDate":"2026-10-24T01:10:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f51298ba-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98979","version":2,"revisionDate":"2026-10-25T01:02:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2254cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98979","version":3,"revisionDate":"2026-10-26T14:48:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f4fd265b-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000019e337f","releaseDate":"2026-10-24T01:10:41-07:00","cveNumber":"CVE-2026-98978","cveTitle":"namespace: never expire a locked mount","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98978","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98978","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98978","version":1,"revisionDate":"2026-10-24T01:10:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"46a19fb4-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98978","version":2,"revisionDate":"2026-10-25T01:02:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1a54cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98978","version":3,"revisionDate":"2026-10-26T14:48:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"44ce0a55-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000ecc863f7","releaseDate":"2026-10-24T01:10:38-07:00","cveNumber":"CVE-2026-98977","cveTitle":"namespace: handle mount locking for automounts correctly","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:43-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98977","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98977","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98977","version":1,"revisionDate":"2026-10-24T01:10:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"36a19fb4-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98977","version":2,"revisionDate":"2026-10-25T01:02:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1254cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98977","version":3,"revisionDate":"2026-10-26T14:48:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"34ce0a55-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000022b2b23c","releaseDate":"2026-10-24T01:10:35-07:00","cveNumber":"CVE-2026-98975","cveTitle":"xfs: stop exchanging reflink flags when exchanging mappings","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:39-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98975","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98975","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98975","version":1,"revisionDate":"2026-10-24T01:10:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"29a19fb4-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98975","version":2,"revisionDate":"2026-10-25T01:02:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0a54cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98975","version":3,"revisionDate":"2026-10-26T14:48:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"151a014f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000f30fa924","releaseDate":"2026-10-24T01:10:29-07:00","cveNumber":"CVE-2026-98972","cveTitle":"cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:35-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98972","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98972","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98972","version":1,"revisionDate":"2026-10-24T01:10:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95689bae-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98972","version":2,"revisionDate":"2026-10-25T01:02:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0254cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98972","version":3,"revisionDate":"2026-10-26T14:48:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"021a014f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00008e8450c7","releaseDate":"2026-10-24T01:10:26-07:00","cveNumber":"CVE-2026-98971","cveTitle":"gpio: exar: initialize the ID before registering its cleanup","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:30-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98971","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98971","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98971","version":1,"revisionDate":"2026-10-24T01:10:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"88689bae-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98971","version":2,"revisionDate":"2026-10-25T01:02:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fa53cbc2-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98971","version":3,"revisionDate":"2026-10-26T14:48:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e819014f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000029f9f769","releaseDate":"2026-10-24T01:10:23-07:00","cveNumber":"CVE-2026-98970","cveTitle":"drm/vc4: Free the BO cache size list on teardown","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:26-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98970","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98970","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98970","version":1,"revisionDate":"2026-10-24T01:10:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"79689bae-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98970","version":2,"revisionDate":"2026-10-25T01:02:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e239d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98970","version":3,"revisionDate":"2026-10-26T14:48:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"14d3b948-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000065298cdc","releaseDate":"2026-10-24T01:10:21-07:00","cveNumber":"CVE-2026-98969","cveTitle":"net/sched: em_text: reject unterminated algo before autoload","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:22-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98969","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98969","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98969","version":1,"revisionDate":"2026-10-24T01:10:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ad0c7fa8-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98969","version":2,"revisionDate":"2026-10-25T01:02:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"da39d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98969","version":3,"revisionDate":"2026-10-26T14:48:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"07d3b948-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000009e337f","releaseDate":"2026-10-24T01:10:18-07:00","cveNumber":"CVE-2026-98968","cveTitle":"amt: send the relay's General Query directly from the receive path","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:53-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98968","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98968","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98968","version":1,"revisionDate":"2026-10-24T01:10:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9c0c7fa8-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98968","version":2,"revisionDate":"2026-10-25T01:02:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d239d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98968","version":4,"revisionDate":"2026-10-28T01:49:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e400c6db-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98968","version":3,"revisionDate":"2026-10-26T14:48:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1462c142-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000ebc863f7","releaseDate":"2026-10-24T01:10:14-07:00","cveNumber":"CVE-2026-98967","cveTitle":"cxgb4/ch_ktls: disable softirqs around tid_list erases","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98967","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98967","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98967","version":1,"revisionDate":"2026-10-24T01:10:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8e0c7fa8-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98967","version":2,"revisionDate":"2026-10-25T01:02:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ca39d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98967","version":4,"revisionDate":"2026-10-28T01:49:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dd00c6db-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98967","version":3,"revisionDate":"2026-10-26T14:48:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0762c142-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000863d0b9a","releaseDate":"2026-10-24T01:10:12-07:00","cveNumber":"CVE-2026-98966","cveTitle":"bonding: fix the program leak when XDP is replaced","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98966","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98966","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98966","version":1,"revisionDate":"2026-10-24T01:10:12-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"800c7fa8-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98966","version":2,"revisionDate":"2026-10-25T01:02:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c039d2bc-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98966","version":3,"revisionDate":"2026-10-26T14:48:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0162c142-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000bc265adf","releaseDate":"2026-10-24T01:10:06-07:00","cveNumber":"CVE-2026-98964","cveTitle":"nvmet: use the local P2P device on metadata allocation failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:06-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98964","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98964","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98964","version":1,"revisionDate":"2026-10-24T01:10:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"da456ca2-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98964","version":2,"revisionDate":"2026-10-25T01:02:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8d5fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98964","version":3,"revisionDate":"2026-10-26T14:48:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f10b1b3c-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000068298cdc","releaseDate":"2026-10-24T01:09:52-07:00","cveNumber":"CVE-2026-98959","cveTitle":"btrfs: fix xattr replace when multiple xattrs are packed in the same item","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:48:02-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98959","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98959","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98959","version":1,"revisionDate":"2026-10-24T01:09:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b39a739c-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98959","version":2,"revisionDate":"2026-10-25T01:02:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"785fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98959","version":3,"revisionDate":"2026-10-26T14:48:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e70b1b3c-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000eec863f7","releaseDate":"2026-10-24T01:09:45-07:00","cveNumber":"CVE-2026-98957","cveTitle":"wifi: mt76: mt7915: disable rx napi when removing device","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98957","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98957","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98957","version":1,"revisionDate":"2026-10-24T01:09:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c1f96e96-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98957","version":2,"revisionDate":"2026-10-25T01:02:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"665fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98957","version":4,"revisionDate":"2026-10-28T01:49:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d400c6db-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98957","version":3,"revisionDate":"2026-10-26T14:47:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6498c735-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000893d0b9a","releaseDate":"2026-10-24T01:09:43-07:00","cveNumber":"CVE-2026-98956","cveTitle":"ASoC: adau1372: allow sleepy powerdown GPIOs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:48-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98956","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98956","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98956","version":1,"revisionDate":"2026-10-24T01:09:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a2f96e96-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98956","version":2,"revisionDate":"2026-10-25T01:02:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"515fcab6-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98956","version":4,"revisionDate":"2026-10-28T01:49:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cf67bad5-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98956","version":3,"revisionDate":"2026-10-26T14:47:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5098c735-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000024b2b23c","releaseDate":"2026-10-24T01:09:40-07:00","cveNumber":"CVE-2026-98955","cveTitle":"flow_dissector: avoid u16 truncation of skb->len when computing thoff","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:49-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98955","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98955","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98955","version":1,"revisionDate":"2026-10-24T01:09:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"90f96e96-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98955","version":2,"revisionDate":"2026-10-25T01:02:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb2bc5b0-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98955","version":3,"revisionDate":"2026-10-26T14:47:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4a98c735-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000bf265adf","releaseDate":"2026-10-24T01:09:37-07:00","cveNumber":"CVE-2026-98954","cveTitle":"net: always dissect GSO packets in __virtio_net_hdr_to_skb()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:44-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98954","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98954","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98954","version":1,"revisionDate":"2026-10-24T01:09:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"45203190-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98954","version":2,"revisionDate":"2026-10-25T01:02:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a92bc5b0-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98954","version":3,"revisionDate":"2026-10-26T14:47:44-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0fc8b62f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000908450c7","releaseDate":"2026-10-24T01:09:27-07:00","cveNumber":"CVE-2026-98951","cveTitle":"riscv: ptrace: Zero-initialize regset buffers before copyin","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:47-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98951","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98951","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98951","version":1,"revisionDate":"2026-10-24T01:09:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"712a2a8a-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98951","version":2,"revisionDate":"2026-10-25T01:02:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9b2bc5b0-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98951","version":4,"revisionDate":"2026-10-28T01:49:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cb67bad5-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98951","version":3,"revisionDate":"2026-10-26T14:47:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ffc7b62f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00002bf9f769","releaseDate":"2026-10-24T01:09:25-07:00","cveNumber":"CVE-2026-98950","cveTitle":"flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:36-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98950","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98950","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98950","version":1,"revisionDate":"2026-10-24T01:09:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4c2a2a8a-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98950","version":2,"revisionDate":"2026-10-25T01:02:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"542bc5b0-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98950","version":3,"revisionDate":"2026-10-26T14:47:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c1f4b629-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000029e337f","releaseDate":"2026-10-24T01:09:18-07:00","cveNumber":"CVE-2026-98948","cveTitle":"mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98948","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98948","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98948","version":1,"revisionDate":"2026-10-24T01:09:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"16112a84-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98948","version":2,"revisionDate":"2026-10-25T01:02:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3f2bc5b0-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98948","version":3,"revisionDate":"2026-10-26T14:47:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"90f4b629-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000edc863f7","releaseDate":"2026-10-24T01:09:14-07:00","cveNumber":"CVE-2026-98947","cveTitle":"vsock: Fix memory leak in vmci_transport_recv_dgram_cb()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:29-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98947","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98947","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98947","version":1,"revisionDate":"2026-10-24T01:09:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"09112a84-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98947","version":2,"revisionDate":"2026-10-25T01:02:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bc6ca9aa-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98947","version":3,"revisionDate":"2026-10-26T14:47:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"56f4b629-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000883d0b9a","releaseDate":"2026-10-24T01:09:11-07:00","cveNumber":"CVE-2026-98946","cveTitle":"drm/vc4: Disable the V3D interrupt across runtime suspend","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:25-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98946","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98946","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98946","version":1,"revisionDate":"2026-10-24T01:09:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fc102a84-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98946","version":2,"revisionDate":"2026-10-25T01:02:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a76ca9aa-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98946","version":3,"revisionDate":"2026-10-26T14:47:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"38c0ad23-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000023b2b23c","releaseDate":"2026-10-24T01:09:07-07:00","cveNumber":"CVE-2026-98945","cveTitle":"HID: steam: Rearrange teardown sequence","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98945","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98945","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98945","version":1,"revisionDate":"2026-10-24T01:09:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bfa4987d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98945","version":2,"revisionDate":"2026-10-25T01:01:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"966ca9aa-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98945","version":3,"revisionDate":"2026-10-26T14:47:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"23c0ad23-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000be265adf","releaseDate":"2026-10-24T01:09:05-07:00","cveNumber":"CVE-2026-98944","cveTitle":"HID: steam: Refactor registration","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:17-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98944","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98944","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98944","version":1,"revisionDate":"2026-10-24T01:09:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b2a4987d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98944","version":2,"revisionDate":"2026-10-25T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"836ca9aa-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98944","version":3,"revisionDate":"2026-10-26T14:47:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1bc0ad23-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000599b0182","releaseDate":"2026-10-24T01:09:02-07:00","cveNumber":"CVE-2026-98943","cveTitle":"HID: steam: Clean up locking","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:45-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98943","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98943","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98943","version":1,"revisionDate":"2026-10-24T01:09:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a5a4987d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98943","version":2,"revisionDate":"2026-10-25T01:01:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"706ca9aa-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98943","version":5,"revisionDate":"2026-10-28T01:49:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c667bad5-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98943","version":3,"revisionDate":"2026-10-26T14:47:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d69c5a1d-4cd1-f111-a059-7ced8d6f0cc3"},{"cveNumber":"CVE-2026-98943","version":4,"revisionDate":"2026-10-27T14:48:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2556dd7f-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000f40fa924","releaseDate":"2026-10-24T01:08:59-07:00","cveNumber":"CVE-2026-98942","cveTitle":"sched_ext: Build the cid tables privately and publish them with RCU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98942","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98942","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98942","version":1,"revisionDate":"2026-10-24T01:08:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"98a4987d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98942","version":2,"revisionDate":"2026-10-25T01:01:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1cebaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98942","version":5,"revisionDate":"2026-10-28T01:49:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb67bad5-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98942","version":3,"revisionDate":"2026-10-26T14:47:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"be9c5a1d-4cd1-f111-a059-7ced8d6f0cc3"},{"cveNumber":"CVE-2026-98942","version":4,"revisionDate":"2026-10-27T14:48:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0756dd7f-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00002af9f769","releaseDate":"2026-10-24T01:08:52-07:00","cveNumber":"CVE-2026-98940","cveTitle":"ASoC: qcom: lpass-cpu: use DAI table index for playback constraints","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:39-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98940","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98940","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98940","version":1,"revisionDate":"2026-10-24T01:08:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e18e6d77-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98940","version":2,"revisionDate":"2026-10-25T01:01:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0aebaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98940","version":4,"revisionDate":"2026-10-28T01:49:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"af67bad5-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98940","version":3,"revisionDate":"2026-10-26T14:47:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a04c3217-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000f0c863f7","releaseDate":"2026-10-24T01:08:46-07:00","cveNumber":"CVE-2026-98937","cveTitle":"perf/core: Check kernel access when kernel callchains are requested","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:47:00-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98937","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98937","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98937","version":1,"revisionDate":"2026-10-24T01:08:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb8b7371-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98937","version":2,"revisionDate":"2026-10-25T01:01:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f9eaaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98937","version":3,"revisionDate":"2026-10-26T14:47:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"274c3217-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00008b3d0b9a","releaseDate":"2026-10-24T01:08:43-07:00","cveNumber":"CVE-2026-98936","cveTitle":"wifi: ath11k: reset ar->num_stations on hardware start","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:37-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98936","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98936","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98936","version":1,"revisionDate":"2026-10-24T01:08:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ad8b7371-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98936","version":2,"revisionDate":"2026-10-25T01:01:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e8eaaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98936","version":4,"revisionDate":"2026-10-28T01:49:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dff8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98936","version":3,"revisionDate":"2026-10-26T14:46:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"224c3217-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000026b2b23c","releaseDate":"2026-10-24T01:08:40-07:00","cveNumber":"CVE-2026-98935","cveTitle":"rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98935","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98935","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98935","version":1,"revisionDate":"2026-10-24T01:08:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a08b7371-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98935","version":2,"revisionDate":"2026-10-25T01:01:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d0eaaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98935","version":3,"revisionDate":"2026-10-26T14:46:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7755d10f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000c1265adf","releaseDate":"2026-10-24T01:08:36-07:00","cveNumber":"CVE-2026-98934","cveTitle":"ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:49-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98934","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98934","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98934","version":1,"revisionDate":"2026-10-24T01:08:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"21a5526b-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98934","version":2,"revisionDate":"2026-10-25T01:01:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b7eaaba4-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98934","version":3,"revisionDate":"2026-10-26T14:46:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7055d10f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000f70fa924","releaseDate":"2026-10-24T01:08:30-07:00","cveNumber":"CVE-2026-98932","cveTitle":"EDAC/altera: Fix use-after-free in error paths","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:36-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98932","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98932","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98932","version":1,"revisionDate":"2026-10-24T01:08:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fda4526b-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98932","version":2,"revisionDate":"2026-10-25T01:01:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"042a6e9e-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98932","version":4,"revisionDate":"2026-10-28T01:49:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dbf8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98932","version":3,"revisionDate":"2026-10-26T14:46:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5f55d10f-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000928450c7","releaseDate":"2026-10-24T01:08:26-07:00","cveNumber":"CVE-2026-98931","cveTitle":"mtd: spinand: fix NULL pointer dereference with no ECC engine","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:40-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98931","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98931","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98931","version":1,"revisionDate":"2026-10-24T01:08:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8e8a3d65-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98931","version":2,"revisionDate":"2026-10-25T01:01:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ef296e9e-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98931","version":3,"revisionDate":"2026-10-26T14:46:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b0c6d908-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00002df9f769","releaseDate":"2026-10-24T01:08:21-07:00","cveNumber":"CVE-2026-98930","cveTitle":"KVM: s390: Fix IRQ injection with SIGP Stop and Store Status","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:34-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98930","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98930","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98930","version":1,"revisionDate":"2026-10-24T01:08:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7f8a3d65-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98930","version":2,"revisionDate":"2026-10-25T01:01:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"da296e9e-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98930","version":4,"revisionDate":"2026-10-28T01:49:34-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d2f8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98930","version":3,"revisionDate":"2026-10-26T14:46:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"88c6d908-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000069298cdc","releaseDate":"2026-10-24T01:08:15-07:00","cveNumber":"CVE-2026-98929","cveTitle":"macsec: initialize SecY before registering the netdevice","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:32-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98929","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98929","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98929","version":1,"revisionDate":"2026-10-24T01:08:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ea4a3b5f-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98929","version":2,"revisionDate":"2026-10-25T01:01:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c6296e9e-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98929","version":4,"revisionDate":"2026-10-28T01:49:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"caf8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98929","version":3,"revisionDate":"2026-10-26T14:46:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c7b8d002-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00008a3d0b9a","releaseDate":"2026-10-24T01:08:01-07:00","cveNumber":"CVE-2026-98926","cveTitle":"drm/amd/display: Remove sink usage from DPMS","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:26-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98926","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98926","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98926","version":1,"revisionDate":"2026-10-24T01:08:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5eca2f59-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98926","version":2,"revisionDate":"2026-10-25T01:01:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b6296e9e-0fd0-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98926","version":3,"revisionDate":"2026-10-26T14:46:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b7b8d002-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000025b2b23c","releaseDate":"2026-10-24T01:07:55-07:00","cveNumber":"CVE-2026-98925","cveTitle":"bpf, sockmap: Fix self-redirect copied_seq double-counting","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:49:27-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98925","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98925","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98925","version":1,"revisionDate":"2026-10-24T01:07:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f5d40253-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98925","version":3,"revisionDate":"2026-10-26T14:49:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"75809a6e-4cd1-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98925","version":2,"revisionDate":"2026-10-25T01:05:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"85a4ec2b-10d0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000c0265adf","releaseDate":"2026-10-24T01:07:52-07:00","cveNumber":"CVE-2026-98924","cveTitle":"fs: avoid repeated scans in evict_inodes()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T14:46:22-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98924","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98924","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98924","version":1,"revisionDate":"2026-10-24T01:07:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e4d40253-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98924","version":2,"revisionDate":"2026-10-25T01:02:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a7afd6c9-0fd0-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-98924","version":3,"revisionDate":"2026-10-26T14:46:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"acb8d002-4cd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000f2c863f7","releaseDate":"2026-10-24T01:07:43-07:00","cveNumber":"CVE-2026-98917","cveTitle":"parisc: Increase kernel stack size to 32kb","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:31-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98917","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98917","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98917","version":1,"revisionDate":"2026-10-24T01:07:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"04241f4c-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98917","version":2,"revisionDate":"2026-10-25T01:02:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9fafd6c9-0fd0-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-98917","version":4,"revisionDate":"2026-10-28T01:49:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c6f8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98917","version":3,"revisionDate":"2026-10-26T14:46:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b0986afc-4bd1-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000028b2b23c","releaseDate":"2026-10-24T01:07:09-07:00","cveNumber":"CVE-2026-98915","cveTitle":"media: video-i2c: use vb2_video_unregister_device on driver removal","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:47:18-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98915","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98915","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98915","version":2,"revisionDate":"2026-10-24T01:07:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ee231f4c-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98915","version":1,"revisionDate":"2026-10-24T01:07:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d2c6a53b-47cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98915","version":3,"revisionDate":"2026-10-24T14:47:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"32040dcd-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00005e9b0182","releaseDate":"2026-10-24T01:05:54-07:00","cveNumber":"CVE-2026-98913","cveTitle":"net: thunderx: fix PTP device ref leak in nicvf_probe()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:47:14-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98913","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98913","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98913","version":2,"revisionDate":"2026-10-24T01:07:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"324dc53d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98913","version":1,"revisionDate":"2026-10-24T01:05:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9816060a-47cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98913","version":3,"revisionDate":"2026-10-24T14:47:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2b040dcd-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000f90fa924","releaseDate":"2026-10-24T01:05:47-07:00","cveNumber":"CVE-2026-98912","cveTitle":"ALSA: seq: oss: Reject reads that cannot fit the next event","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:47:11-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98912","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98912","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98912","version":2,"revisionDate":"2026-10-24T01:07:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"274dc53d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98912","version":1,"revisionDate":"2026-10-24T01:05:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8a16060a-47cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98912","version":3,"revisionDate":"2026-10-24T14:47:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1cc43dc6-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000948450c7","releaseDate":"2026-10-24T01:05:41-07:00","cveNumber":"CVE-2026-98911","cveTitle":"dpaa2-switch: fix the error path in dpaa2_switch_rx()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:47:07-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98911","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98911","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98911","version":2,"revisionDate":"2026-10-24T01:07:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1f4dc53d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98911","version":1,"revisionDate":"2026-10-24T01:05:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"86f1e403-47cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98911","version":3,"revisionDate":"2026-10-24T14:47:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"16c43dc6-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00002ff9f769","releaseDate":"2026-10-24T01:05:35-07:00","cveNumber":"CVE-2026-98910","cveTitle":"drm/amdkfd: Unwind debug trap enable on copy_to_user failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:47:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98910","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98910","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98910","version":2,"revisionDate":"2026-10-24T01:07:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"174dc53d-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98910","version":1,"revisionDate":"2026-10-24T01:05:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"78f1e403-47cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98910","version":3,"revisionDate":"2026-10-24T14:47:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0fc43dc6-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00006b298cdc","releaseDate":"2026-10-24T01:05:30-07:00","cveNumber":"CVE-2026-98909","cveTitle":"net: cpsw_new: unregister devlink on port registration failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:59-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98909","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98909","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98909","version":2,"revisionDate":"2026-10-24T01:07:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"64dece37-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98909","version":1,"revisionDate":"2026-10-24T01:05:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"217f4cfd-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98909","version":3,"revisionDate":"2026-10-24T14:46:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"37b1acbf-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000069e337f","releaseDate":"2026-10-24T01:05:23-07:00","cveNumber":"CVE-2026-98908","cveTitle":"net: microchip: sparx5: clean up PSFP resources on flower setup failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:55-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98908","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98908","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98908","version":2,"revisionDate":"2026-10-24T01:07:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"56dece37-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98908","version":1,"revisionDate":"2026-10-24T01:05:23-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d21e4ff7-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98908","version":3,"revisionDate":"2026-10-24T14:46:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"33b1acbf-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000f1c863f7","releaseDate":"2026-10-24T01:05:17-07:00","cveNumber":"CVE-2026-98907","cveTitle":"btrfs: protect sb_write_pointer() with invalidate lock","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98907","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98907","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98907","version":2,"revisionDate":"2026-10-24T01:06:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e1170010-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98907","version":1,"revisionDate":"2026-10-24T01:05:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b01e4ff7-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98907","version":3,"revisionDate":"2026-10-24T14:46:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6f1a7ab9-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000f80fa924","releaseDate":"2026-10-24T01:05:11-07:00","cveNumber":"CVE-2026-98902","cveTitle":"md/raid5: let stripe batch bm_seq comparison wrap-safe","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:45-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98902","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98902","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98902","version":2,"revisionDate":"2026-10-24T01:05:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c1d6f609-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98902","version":1,"revisionDate":"2026-10-24T01:05:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"912018f1-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98902","version":3,"revisionDate":"2026-10-24T14:46:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6b1a7ab9-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000938450c7","releaseDate":"2026-10-24T01:05:05-07:00","cveNumber":"CVE-2026-98901","cveTitle":"ksmbd: fix lease break and ack state handling","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98901","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98901","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98901","version":2,"revisionDate":"2026-10-24T01:05:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"abd6f609-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98901","version":1,"revisionDate":"2026-10-24T01:05:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7a2018f1-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98901","version":3,"revisionDate":"2026-10-24T14:46:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"661a7ab9-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00002ef9f769","releaseDate":"2026-10-24T01:04:58-07:00","cveNumber":"CVE-2026-98900","cveTitle":"xen/gntalloc: validate grant count before allocation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:37-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98900","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98900","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98900","version":2,"revisionDate":"2026-10-24T01:05:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d3838103-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98900","version":1,"revisionDate":"2026-10-24T01:04:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8ffa09eb-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98900","version":3,"revisionDate":"2026-10-24T14:46:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"26feaab2-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00006f3122d4","releaseDate":"2026-10-24T01:04:52-07:00","cveNumber":"CVE-2026-98899","cveTitle":"netfilter: ipset: mark the rcu locked areas properly","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:34-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98899","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98899","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98899","version":2,"revisionDate":"2026-10-24T01:05:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cb838103-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98899","version":1,"revisionDate":"2026-10-24T01:04:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0b3debe4-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98899","version":3,"revisionDate":"2026-10-24T14:46:34-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"22feaab2-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000d4bc7a31","releaseDate":"2026-10-24T01:04:47-07:00","cveNumber":"CVE-2026-98898","cveTitle":"drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:30-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98898","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98898","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98898","version":2,"revisionDate":"2026-10-24T01:05:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c3838103-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98898","version":1,"revisionDate":"2026-10-24T01:04:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fd3cebe4-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98898","version":3,"revisionDate":"2026-10-24T14:46:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1efeaab2-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00005a5c524c","releaseDate":"2026-10-24T01:04:40-07:00","cveNumber":"CVE-2026-98896","cveTitle":"thunderbolt: Keep the domain reference while processing hotplug","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:25-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98896","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98896","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98896","version":2,"revisionDate":"2026-10-24T01:05:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b3838103-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98896","version":1,"revisionDate":"2026-10-24T01:04:40-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ac53d8de-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98896","version":3,"revisionDate":"2026-10-24T14:46:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c26242ac-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-000061a39779","releaseDate":"2026-10-24T01:04:35-07:00","cveNumber":"CVE-2026-98893","cveTitle":"firmware: arm_scmi: Validate SENSOR_UPDATE payload size","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-29T01:43:28-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98893","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98893","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98893","version":2,"revisionDate":"2026-10-24T01:05:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"168a48fd-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98893","version":1,"revisionDate":"2026-10-24T01:04:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9353d8de-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98893","version":3.1,"revisionDate":"2026-10-29T01:43:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"61419a22-3ad3-f111-a059-7ced8d6dc516"},{"cveNumber":"CVE-2026-98893","version":3,"revisionDate":"2026-10-24T14:46:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"be6242ac-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000c62ef0d6","releaseDate":"2026-10-24T01:04:32-07:00","cveNumber":"CVE-2026-98892","cveTitle":"firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:18-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98892","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98892","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98892","version":2,"revisionDate":"2026-10-24T01:05:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0e8a48fd-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98892","version":1,"revisionDate":"2026-10-24T01:04:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8653d8de-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98892","version":3,"revisionDate":"2026-10-24T14:46:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7340d6a5-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000978ce6be","releaseDate":"2026-10-24T01:04:27-07:00","cveNumber":"CVE-2026-98891","cveTitle":"wifi: mac80211: validate deauth frame length before reason access","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:14-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98891","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98891","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98891","version":2,"revisionDate":"2026-10-24T01:05:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"048a48fd-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98891","version":1,"revisionDate":"2026-10-24T01:04:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"525a42d8-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98891","version":3,"revisionDate":"2026-10-24T14:46:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6740d6a5-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000fc173f1c","releaseDate":"2026-10-24T01:04:21-07:00","cveNumber":"CVE-2026-98890","cveTitle":"wifi: libertas: reject short monitor TX frames","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98890","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98890","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98890","version":2,"revisionDate":"2026-10-24T01:05:22-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b00c2ff7-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98890","version":1,"revisionDate":"2026-10-24T01:04:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a4b33dd2-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98890","version":3,"revisionDate":"2026-10-24T14:46:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5740d6a5-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00006e3122d4","releaseDate":"2026-10-24T01:04:15-07:00","cveNumber":"CVE-2026-98889","cveTitle":"wifi: iwlwifi: mvm: fix sched scan IE sizing","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:05-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98889","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98889","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98889","version":2,"revisionDate":"2026-10-24T01:05:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a40c2ff7-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98889","version":1,"revisionDate":"2026-10-24T01:04:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84b33dd2-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98889","version":3,"revisionDate":"2026-10-24T14:46:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5fcde09e-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000d3bc7a31","releaseDate":"2026-10-24T01:04:09-07:00","cveNumber":"CVE-2026-98888","cveTitle":"arm64: kprobes: Allow reentering kprobes while single-stepping","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:46:01-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98888","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98888","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98888","version":2,"revisionDate":"2026-10-24T01:05:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9c0c2ff7-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98888","version":1,"revisionDate":"2026-10-24T01:04:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"032245cc-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98888","version":3,"revisionDate":"2026-10-24T14:46:01-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"53cde09e-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000f4d0f9ee","releaseDate":"2026-10-24T01:04:04-07:00","cveNumber":"CVE-2026-98887","cveTitle":"wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:57-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98887","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98887","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98887","version":2,"revisionDate":"2026-10-24T01:05:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"930c2ff7-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98887","version":1,"revisionDate":"2026-10-24T01:04:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f32145cc-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98887","version":3,"revisionDate":"2026-10-24T14:45:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4ccde09e-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000595c524c","releaseDate":"2026-10-24T01:03:57-07:00","cveNumber":"CVE-2026-98886","cveTitle":"drm/gma500: return errors from Oaktrail HDMI I2C reads","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:53-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98886","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98886","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98886","version":2,"revisionDate":"2026-10-24T01:05:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"890c2ff7-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98886","version":1,"revisionDate":"2026-10-24T01:03:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cb20cec5-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98886","version":3,"revisionDate":"2026-10-24T14:45:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84a9a598-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00002aba4834","releaseDate":"2026-10-24T01:03:50-07:00","cveNumber":"CVE-2026-98885","cveTitle":"ima: return error early if file xattr cannot be changed","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98885","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98885","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98885","version":2,"revisionDate":"2026-10-24T01:05:12-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c88736f1-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98885","version":1,"revisionDate":"2026-10-24T01:03:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8d20cec5-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98885","version":3,"revisionDate":"2026-10-24T14:45:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"80a9a598-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00008f45a191","releaseDate":"2026-10-24T01:03:45-07:00","cveNumber":"CVE-2026-98884","cveTitle":"mmc: core: Add validation for host-provided max_segs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:46-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98884","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98884","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98884","version":2,"revisionDate":"2026-10-24T01:05:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba8736f1-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98884","version":1,"revisionDate":"2026-10-24T01:03:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b2f8d2bf-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98884","version":3,"revisionDate":"2026-10-24T14:45:46-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7ca9a598-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000968ce6be","releaseDate":"2026-10-24T01:03:39-07:00","cveNumber":"CVE-2026-98881","cveTitle":"net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:43-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98881","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98881","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98881","version":2,"revisionDate":"2026-10-24T01:05:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9e8736f1-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98881","version":1,"revisionDate":"2026-10-24T01:03:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d6a6d7b9-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98881","version":3,"revisionDate":"2026-10-24T14:45:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"54562092-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000fb173f1c","releaseDate":"2026-10-24T01:03:33-07:00","cveNumber":"CVE-2026-98880","cveTitle":"ntfs3: handle set_blocksize failures","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98880","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98880","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98880","version":2,"revisionDate":"2026-10-24T01:05:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e09a19eb-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98880","version":1,"revisionDate":"2026-10-24T01:03:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c8a6d7b9-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98880","version":3,"revisionDate":"2026-10-24T14:45:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4c562092-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000613122d4","releaseDate":"2026-10-24T01:03:25-07:00","cveNumber":"CVE-2026-98879","cveTitle":"isofs: handle set_blocksize failures","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:45:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98879","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98879","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98879","version":2,"revisionDate":"2026-10-24T01:04:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d79a19eb-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98879","version":1,"revisionDate":"2026-10-24T01:03:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"933c3ab3-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98879","version":3,"revisionDate":"2026-10-24T14:45:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1614858b-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000e7d0f9ee","releaseDate":"2026-10-24T01:03:19-07:00","cveNumber":"CVE-2026-98877","cveTitle":"irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T01:03:59-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98877","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98877","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98877","version":1,"revisionDate":"2026-10-24T01:03:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7f3c3ab3-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98877","version":2,"revisionDate":"2026-10-24T14:45:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1014858b-b9cf-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98877","version":3,"revisionDate":"2026-10-26T01:03:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cc84d01d-d9d0-f111-a059-7ced8d6f0a80"}]},{"id":"00000000-0000-0000-0000-00004c5c524c","releaseDate":"2026-10-24T01:03:14-07:00","cveNumber":"CVE-2026-98876","cveTitle":"host1x: bus: Fix missing ops null check in error teardown","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T01:03:56-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98876","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98876","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98876","version":1,"revisionDate":"2026-10-24T01:03:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"38e01fad-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98876","version":2,"revisionDate":"2026-10-24T14:45:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0c14858b-b9cf-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98876","version":3,"revisionDate":"2026-10-26T01:03:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba84d01d-d9d0-f111-a059-7ced8d6f0a80"}]},{"id":"00000000-0000-0000-0000-00001dba4834","releaseDate":"2026-10-24T01:03:09-07:00","cveNumber":"CVE-2026-98875","cveTitle":"drm/nouveau/gsp: add SEC2 to GA100 chip table","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T01:03:54-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98875","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98875","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98875","version":1,"revisionDate":"2026-10-24T01:03:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"28e01fad-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98875","version":2,"revisionDate":"2026-10-24T14:45:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba60ae84-b9cf-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98875","version":3,"revisionDate":"2026-10-26T01:03:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"517ec717-d9d0-f111-a059-7ced8d6f0a80"}]},{"id":"00000000-0000-0000-0000-000053a39779","releaseDate":"2026-10-24T01:03:02-07:00","cveNumber":"CVE-2026-98873","cveTitle":"netfilter: nf_conntrack_expect: zero at allocation time","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T01:03:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98873","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98873","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98873","version":1,"revisionDate":"2026-10-24T01:03:02-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4abe5da6-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98873","version":2,"revisionDate":"2026-10-24T14:45:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"af60ae84-b9cf-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98873","version":3,"revisionDate":"2026-10-26T01:03:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"307ec717-d9d0-f111-a059-7ced8d6f0a80"}]},{"id":"00000000-0000-0000-0000-0000b82ef0d6","releaseDate":"2026-10-24T01:02:54-07:00","cveNumber":"CVE-2026-98872","cveTitle":"freevxfs: don't BUG() on unknown typed-extent type","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-26T01:03:48-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98872","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98872","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98872","version":1,"revisionDate":"2026-10-24T01:02:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d47641a0-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98872","version":2,"revisionDate":"2026-10-24T14:45:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a960ae84-b9cf-f111-a059-7ced8d6dc6d1"},{"cveNumber":"CVE-2026-98872","version":3,"revisionDate":"2026-10-26T01:03:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"287ec717-d9d0-f111-a059-7ced8d6f0a80"}]},{"id":"00000000-0000-0000-0000-00008d3d0b9a","releaseDate":"2026-10-24T01:02:47-07:00","cveNumber":"CVE-2026-98916","cveTitle":"wifi: nl80211: check link is beaconing for color change","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T01:07:39-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98916","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98916","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98916","version":2,"revisionDate":"2026-10-24T01:07:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f7231f4c-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98916","version":1,"revisionDate":"2026-10-24T01:02:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c07641a0-46cf-f111-a059-70a8a5b1b6b9"}]},{"id":"00000000-0000-0000-0000-0000c3265adf","releaseDate":"2026-10-24T01:02:41-07:00","cveNumber":"CVE-2026-98914","cveTitle":"drm/amdgpu: cap ATOM command table nesting depth","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T01:07:26-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98914","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98914","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98914","version":2,"revisionDate":"2026-10-24T01:07:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e6342244-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98914","version":1,"revisionDate":"2026-10-24T01:02:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8cca1099-46cf-f111-a059-70a8a5b1b6b9"}]},{"id":"00000000-0000-0000-0000-00008c3d0b9a","releaseDate":"2026-10-24T01:02:35-07:00","cveNumber":"CVE-2026-98906","cveTitle":"net: lan966x: restore RX state on reload failure","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T01:05:56-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98906","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98906","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98906","version":2,"revisionDate":"2026-10-24T01:05:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b4170010-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98906","version":1,"revisionDate":"2026-10-24T01:02:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"96c91099-46cf-f111-a059-70a8a5b1b6b9"}]},{"id":"00000000-0000-0000-0000-000027b2b23c","releaseDate":"2026-10-24T01:02:30-07:00","cveNumber":"CVE-2026-98905","cveTitle":"drm/amdkfd: Properly acquire queue buffers in CRIU restore","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:29-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98905","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98905","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98905","version":2,"revisionDate":"2026-10-24T01:05:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dcd6f609-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98905","version":1,"revisionDate":"2026-10-24T01:02:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9ed83092-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98905","version":4,"revisionDate":"2026-10-28T01:49:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"baf8b2cf-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98905","version":3,"revisionDate":"2026-10-27T14:48:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f08dcf79-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000c2265adf","releaseDate":"2026-10-24T01:02:24-07:00","cveNumber":"CVE-2026-98904","cveTitle":"mailbox: imx: Use devm_pm_runtime_enable()","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T01:05:52-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98904","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98904","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98904","version":2,"revisionDate":"2026-10-24T01:05:52-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d4d6f609-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98904","version":1,"revisionDate":"2026-10-24T01:02:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84d83092-46cf-f111-a059-70a8a5b1b6b9"}]},{"id":"00000000-0000-0000-0000-00005d9b0182","releaseDate":"2026-10-24T01:02:18-07:00","cveNumber":"CVE-2026-98903","cveTitle":"mailbox: imx: Add a channel shutdown field","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T01:05:50-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98903","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98903","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98903","version":2,"revisionDate":"2026-10-24T01:05:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ccd6f609-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98903","version":1,"revisionDate":"2026-10-24T01:02:18-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2adf558b-46cf-f111-a059-70a8a5b1b6b9"}]},{"id":"00000000-0000-0000-0000-0000f5d0f9ee","releaseDate":"2026-10-24T01:02:13-07:00","cveNumber":"CVE-2026-98897","cveTitle":"ksmbd: don't hold ci->m_lock while waiting for a lease break ack","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:24-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98897","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98897","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98897","version":2,"revisionDate":"2026-10-24T01:05:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bb838103-47cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98897","version":1,"revisionDate":"2026-10-24T01:02:13-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"08df558b-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98897","version":4,"revisionDate":"2026-10-28T01:49:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9806f9c8-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98897","version":3,"revisionDate":"2026-10-27T14:48:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a78dcf79-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00002bba4834","releaseDate":"2026-10-24T01:02:08-07:00","cveNumber":"CVE-2026-98895","cveTitle":"net/mlx5: HWS, Handle destroying table that has a miss table","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98895","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98895","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98895","version":2,"revisionDate":"2026-10-24T01:05:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2d8a48fd-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98895","version":1,"revisionDate":"2026-10-24T01:02:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"845d3e85-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98895","version":4,"revisionDate":"2026-10-28T01:49:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9206f9c8-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98895","version":3,"revisionDate":"2026-10-27T14:48:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8b1e9e73-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00009045a191","releaseDate":"2026-10-24T01:02:03-07:00","cveNumber":"CVE-2026-98894","cveTitle":"drm/amd/ras: reset CPER ring on corrupt entry size","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:17-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98894","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98894","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98894","version":2,"revisionDate":"2026-10-24T01:05:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1e8a48fd-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98894","version":1,"revisionDate":"2026-10-24T01:02:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6c5d3e85-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98894","version":4,"revisionDate":"2026-10-28T01:49:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8606f9c8-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98894","version":3,"revisionDate":"2026-10-27T14:48:25-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"121e9e73-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000060a39779","releaseDate":"2026-10-24T01:01:57-07:00","cveNumber":"CVE-2026-98883","cveTitle":"serial: 8250_port: recognize UPIO_AU","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:14-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98883","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98883","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98883","version":2,"revisionDate":"2026-10-24T01:05:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b08736f1-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98883","version":1,"revisionDate":"2026-10-24T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dd121d7f-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98883","version":4,"revisionDate":"2026-10-28T01:49:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a7e38cc2-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98883","version":3,"revisionDate":"2026-10-27T14:48:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d91d9e73-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000c52ef0d6","releaseDate":"2026-10-24T01:01:51-07:00","cveNumber":"CVE-2026-98882","cveTitle":"media: chips-media: wave5: Add range checks for dec_output_info","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:11-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98882","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98882","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98882","version":2,"revisionDate":"2026-10-24T01:05:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a88736f1-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98882","version":1,"revisionDate":"2026-10-24T01:01:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c5121d7f-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98882","version":4,"revisionDate":"2026-10-28T01:49:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"89e38cc2-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98882","version":3,"revisionDate":"2026-10-27T14:48:16-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8360546d-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-0000c6bc7a31","releaseDate":"2026-10-24T01:01:47-07:00","cveNumber":"CVE-2026-98878","cveTitle":"irqchip/gic-v5: Immediately exec priority drop following activate","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:07-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98878","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98878","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98878","version":2,"revisionDate":"2026-10-24T01:04:56-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c99a19eb-46cf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-98878","version":1,"revisionDate":"2026-10-24T01:01:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4950e077-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98878","version":4,"revisionDate":"2026-10-28T01:49:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6ae38cc2-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98878","version":3,"revisionDate":"2026-10-27T14:48:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b15f546d-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-00008245a191","releaseDate":"2026-10-24T01:01:41-07:00","cveNumber":"CVE-2026-98874","cveTitle":"wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:49:03-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98874","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98874","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98874","version":1,"revisionDate":"2026-10-24T01:01:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3950e077-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-98874","version":2,"revisionDate":"2026-10-26T01:03:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"407ec717-d9d0-f111-a059-7ced8d6f0a80"},{"cveNumber":"CVE-2026-98874","version":4,"revisionDate":"2026-10-28T01:49:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"830e11bc-71d2-f111-a059-7ced8d6f0cb4"},{"cveNumber":"CVE-2026-98874","version":3,"revisionDate":"2026-10-27T14:48:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e1c65b67-15d2-f111-a059-7ced8d6f0cc3"}]},{"id":"00000000-0000-0000-0000-000032149185","releaseDate":"2026-10-24T01:01:36-07:00","cveNumber":"CVE-2026-114583","cveTitle":"tar filter allows writing outside destination via empty-named symlink","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-30T01:45:06-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-114583","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114583","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"PSF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-114583","version":2,"revisionDate":"2026-10-25T01:02:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7666c7b3-0fd0-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-114583","version":6,"revisionDate":"2026-10-30T01:45:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1facb186-03d4-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-114583","version":1,"revisionDate":"2026-10-24T01:01:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1b90cd71-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-114583","version":3,"revisionDate":"2026-10-26T01:48:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"2a810469-dfd0-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-114583","version":5,"revisionDate":"2026-10-28T14:44:50-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"9cf26b1c-ded2-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-114583","version":4,"revisionDate":"2026-10-28T01:48:59-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"740e11bc-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000098500ebe","releaseDate":"2026-10-24T01:01:26-07:00","cveNumber":"CVE-2026-115506","cveTitle":"libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:44:53-07:00","cweList":["CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"],"cweDetailsListForSearch":["cwe: CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","cweUrl: https://cwe.mitre.org/data/definitions/776.html"],"mitreText":"CVE-2026-115506","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115506","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"VulnCheck","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"VulnCheck","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","https://cwe.mitre.org/data/definitions/776.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-115506","version":4,"revisionDate":"2026-10-28T01:44:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6c894b2a-71d2-f111-a059-6045bd0a04e8"},{"cveNumber":"CVE-2026-115506","version":1,"revisionDate":"2026-10-24T01:01:26-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"56a1d26b-46cf-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-115506","version":3,"revisionDate":"2026-10-26T01:48:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"89bf3e62-dfd0-f111-a059-7ced8d6f06f2"},{"cveNumber":"CVE-2026-115506","version":2,"revisionDate":"2026-10-25T01:01:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b8296e9e-0fd0-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000b98450c7","releaseDate":"2026-10-23T01:16:09-07:00","cveNumber":"CVE-2026-97951","cveTitle":"scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:44:43-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-97951","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97951","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-97951","version":1,"revisionDate":"2026-10-23T01:16:09-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"78a2a352-7fce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-97951","version":2,"revisionDate":"2026-10-24T14:44:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"84724771-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-00000c3222d4","releaseDate":"2026-10-23T01:15:31-07:00","cveNumber":"CVE-2026-93819","cveTitle":"PCI: mediatek: Protect root bus removal with rescan lock","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-24T14:44:32-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-93819","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93819","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-93819","version":1,"revisionDate":"2026-10-23T01:15:31-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4fa47e39-7fce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-93819","version":2,"revisionDate":"2026-10-24T14:44:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"126af46a-b9cf-f111-a059-7ced8d6dc6d1"}]},{"id":"00000000-0000-0000-0000-0000674f48b5","releaseDate":"2026-10-23T01:13:57-07:00","cveNumber":"CVE-2026-92482","cveTitle":"pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:57-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-92482","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92482","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-92482","version":1,"revisionDate":"2026-10-23T01:13:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5c47a204-7fce-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-0000af4f48b5","releaseDate":"2026-10-23T01:13:51-07:00","cveNumber":"CVE-2026-90422","cveTitle":"clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:51-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-90422","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90422","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-90422","version":1,"revisionDate":"2026-10-23T01:13:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b58b70fe-7ece-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-00001e571dba","releaseDate":"2026-10-23T01:13:41-07:00","cveNumber":"CVE-2026-89472","cveTitle":"power: supply: charger-manager: register regulators before exposing sysfs","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:41-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-89472","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89472","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-89472","version":1,"revisionDate":"2026-10-23T01:13:41-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7b607bf7-7ece-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-00002057b9e7","releaseDate":"2026-10-23T01:13:35-07:00","cveNumber":"CVE-2026-74337","cveTitle":"bpf: Fix NMI/tracepoint re-entry deadlock on lru locks","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:35-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-74337","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74337","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-74337","version":1,"revisionDate":"2026-10-23T01:13:35-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5d607bf7-7ece-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-0000b38cb154","releaseDate":"2026-10-23T01:13:30-07:00","cveNumber":"CVE-2026-74273","cveTitle":"cxl/region: Block region delete during region creation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:30-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-74273","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74273","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-74273","version":1,"revisionDate":"2026-10-23T01:13:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"db9e74f1-7ece-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-0000c0e21145","releaseDate":"2026-10-23T01:13:24-07:00","cveNumber":"CVE-2026-72380","cveTitle":"xen/pvcalls: bound backend response req_id before indexing rsp[]","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-23T01:13:24-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-72380","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72380","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-72380","version":1,"revisionDate":"2026-10-23T01:13:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c39e74f1-7ece-f111-a059-000d3a369ea6"}]},{"id":"00000000-0000-0000-0000-0000e41bddbc","releaseDate":"2026-10-23T01:12:00-07:00","cveNumber":"CVE-2014-0021","cveTitle":"Chrony before 1.29.1 has traffic amplification in cmdmon protocol","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:28-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2014-0021","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2014-0021","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"redhat","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"NVD","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2014-0021","version":1,"revisionDate":"2026-10-23T01:12:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"327064ba-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2014-0021","version":2,"revisionDate":"2026-10-28T01:48:28-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"47ca17a9-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000ece27517","releaseDate":"2026-10-23T01:11:39-07:00","cveNumber":"CVE-2026-86413","cveTitle":"Negotiate credentials sent to redirected origin","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:20-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86413","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86413","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86413","version":1,"revisionDate":"2026-10-23T01:11:39-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"8b302eae-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86413","version":2,"revisionDate":"2026-10-28T01:48:20-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"76a11aa3-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00008aeacc01","releaseDate":"2026-10-23T01:11:27-07:00","cveNumber":"CVE-2026-94265","cveTitle":"Authorization: Negotiate sent to foreign origin","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:17-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-94265","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94265","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-94265","version":1,"revisionDate":"2026-10-23T01:11:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"446229a8-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-94265","version":2,"revisionDate":"2026-10-28T01:48:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"63a11aa3-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00001cac6c7e","releaseDate":"2026-10-23T01:11:15-07:00","cveNumber":"CVE-2026-87861","cveTitle":"cross-origin reuse of a Negotiate connection","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:14-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-87861","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87861","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-87861","version":1,"revisionDate":"2026-10-23T01:11:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4d54d6a1-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-87861","version":2,"revisionDate":"2026-10-28T01:48:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"56a11aa3-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00008e9e62e7","releaseDate":"2026-10-23T01:11:05-07:00","cveNumber":"CVE-2026-86415","cveTitle":"auto client cert connection reuse mixup","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:10-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86415","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86415","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86415","version":1,"revisionDate":"2026-10-23T01:11:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a19db09b-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86415","version":2,"revisionDate":"2026-10-28T01:48:10-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"376d1f9d-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000087571dba","releaseDate":"2026-10-23T01:10:54-07:00","cveNumber":"CVE-2026-86412","cveTitle":"server-set cookie erases cookie jar","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:08-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86412","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86412","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86412","version":1,"revisionDate":"2026-10-23T01:10:54-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c9a8bd94-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86412","version":2,"revisionDate":"2026-10-28T01:48:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"226d1f9d-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000022ccc45c","releaseDate":"2026-10-23T01:10:45-07:00","cveNumber":"CVE-2026-86411","cveTitle":"FTP connection reuse inherits client-certificate","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:48:05-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86411","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86411","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86411","version":1,"revisionDate":"2026-10-23T01:10:45-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a1cfb48e-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86411","version":2,"revisionDate":"2026-10-28T01:48:05-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"106d1f9d-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000fdcb854f","releaseDate":"2026-10-23T01:07:47-07:00","cveNumber":"CVE-2026-92387","cveTitle":"never-ending loop via server response omission","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:47:42-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-92387","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92387","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-92387","version":1,"revisionDate":"2026-10-23T01:07:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"579f8c27-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-92387","version":2,"revisionDate":"2026-10-23T14:45:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"d349f063-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-92387","version":3,"revisionDate":"2026-10-28T01:47:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1604e98a-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00008137c5db","releaseDate":"2026-10-23T01:07:32-07:00","cveNumber":"CVE-2026-87862","cveTitle":"HSTS cache import drops longer-lived child","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:47:38-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-87862","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87862","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-87862","version":1,"revisionDate":"2026-10-23T01:07:32-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ccdb4c1b-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-87862","version":2,"revisionDate":"2026-10-23T14:45:29-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f0c3f25d-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-87862","version":3,"revisionDate":"2026-10-28T01:47:38-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"0804e98a-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000bd406cff","releaseDate":"2026-10-23T01:07:17-07:00","cveNumber":"CVE-2026-86410","cveTitle":"redirect to SFTP or SCP bypasses host verification","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:47:30-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86410","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86410","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86410","version":1,"revisionDate":"2026-10-23T01:07:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bcca4a15-7ece-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86410","version":2,"revisionDate":"2026-10-23T14:45:15-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"95007c57-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-86410","version":3,"revisionDate":"2026-10-28T01:47:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4695eb84-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00004b4e7696","releaseDate":"2026-10-23T01:06:03-07:00","cveNumber":"CVE-2026-87864","cveTitle":"IMAP APPEND plus CRLF conversion command injection","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:47:07-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-87864","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87864","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-87864","version":1,"revisionDate":"2026-10-23T01:06:03-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c63d58e8-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-87864","version":3,"revisionDate":"2026-10-24T01:44:53-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6e7a427d-4ccf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-87864","version":2,"revisionDate":"2026-10-23T14:45:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"f049f063-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-87864","version":4,"revisionDate":"2026-10-28T01:47:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"dd998578-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000029130a8a","releaseDate":"2026-10-23T01:04:17-07:00","cveNumber":"CVE-2026-86414","cveTitle":"leaking host credentials to HTTP proxy","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:46:14-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-86414","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86414","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-86414","version":1,"revisionDate":"2026-10-23T01:04:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ea3bc8aa-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-86414","version":3,"revisionDate":"2026-10-24T01:44:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6a7a427d-4ccf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-86414","version":2,"revisionDate":"2026-10-23T14:45:19-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6ac3f25d-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-86414","version":4,"revisionDate":"2026-10-28T01:46:14-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ce0dcf56-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000015652751","releaseDate":"2026-10-23T01:03:55-07:00","cveNumber":"CVE-2026-87866","cveTitle":"wolfSSL public-key pinning bypass","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:46:06-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-87866","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87866","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-87866","version":1,"revisionDate":"2026-10-23T01:03:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"e740f29d-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-87866","version":2,"revisionDate":"2026-10-23T14:45:08-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7e007c57-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-87866","version":3,"revisionDate":"2026-10-28T01:46:06-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a90dcf56-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000e6c21d39","releaseDate":"2026-10-23T01:03:07-07:00","cveNumber":"CVE-2026-87863","cveTitle":"HSTS response erases persisted entries","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:48-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-87863","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87863","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-87863","version":1,"revisionDate":"2026-10-23T01:03:07-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c584547f-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-87863","version":2,"revisionDate":"2026-10-23T14:45:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"45917e51-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-87863","version":3,"revisionDate":"2026-10-28T01:45:48-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3770724a-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-00009b2d3114","releaseDate":"2026-10-23T01:02:33-07:00","cveNumber":"CVE-2026-107928","cveTitle":"info leak uploading over WebSockets with GnuTLS","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:33-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-107928","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107928","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-107928","version":1,"revisionDate":"2026-10-23T01:02:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3978256d-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-107928","version":2,"revisionDate":"2026-10-24T01:44:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"fcdeec76-4ccf-f111-a059-0022480c31a4"},{"cveNumber":"CVE-2026-107928","version":3,"revisionDate":"2026-10-28T01:45:33-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cd54d543-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000034b5d494","releaseDate":"2026-10-23T01:02:21-07:00","cveNumber":"CVE-2026-92391","cveTitle":"curl_mime_free stack overflow by recursion","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:27-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-92391","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92391","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-92391","version":1,"revisionDate":"2026-10-23T01:02:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b3c22861-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-92391","version":2,"revisionDate":"2026-10-23T14:44:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b446f24a-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-92391","version":3,"revisionDate":"2026-10-28T01:45:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c3e6a53d-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-000098402df2","releaseDate":"2026-10-23T01:01:57-07:00","cveNumber":"CVE-2026-92386","cveTitle":"server-set cookie aborts cookie jar load","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-28T01:45:21-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-92386","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92386","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"curl","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-92386","version":1,"revisionDate":"2026-10-23T01:01:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b09ea354-7dce-f111-a059-000d3a369ea6"},{"cveNumber":"CVE-2026-92386","version":2,"revisionDate":"2026-10-23T14:44:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cc994644-f0ce-f111-a059-70a8a5b1b6b9"},{"cveNumber":"CVE-2026-92386","version":3,"revisionDate":"2026-10-28T01:45:21-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"67559a37-71d2-f111-a059-7ced8d6f0cb4"}]},{"id":"00000000-0000-0000-0000-0000eb90ce1f","releaseDate":"2026-10-22T19:44:58-07:00","cveNumber":"CVE-2026-113291","cveTitle":"Chromium CVE-2026-113291: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:58-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113291","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113291","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113291","version":1,"revisionDate":"2026-10-22T19:44:58-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a49fed0e-51ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000ec90ce1f","releaseDate":"2026-10-22T19:44:51-07:00","cveNumber":"CVE-2026-113290","cveTitle":"Chromium CVE-2026-113290: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:51-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113290","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113290","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113290","version":1,"revisionDate":"2026-10-22T19:44:51-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7d0ccf08-51ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-00007e0576c2","releaseDate":"2026-10-22T19:44:42-07:00","cveNumber":"CVE-2026-113289","cveTitle":"Chromium CVE-2026-113289: Improper input validation","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:42-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-20: Improper Input Validation"],"cweDetailsListForSearch":["cwe: CWE-20: Improper Input Validation","cweUrl: https://cwe.mitre.org/data/definitions/20.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113289","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113289","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-20: Improper Input Validation","https://cwe.mitre.org/data/definitions/20.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113289","version":1,"revisionDate":"2026-10-22T19:44:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"bc3dd402-51ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-00007f0576c2","releaseDate":"2026-10-22T19:44:36-07:00","cveNumber":"CVE-2026-113288","cveTitle":"Chromium CVE-2026-113288: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:36-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113288","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113288","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113288","version":1,"revisionDate":"2026-10-22T19:44:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a43dd402-51ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000840576c2","releaseDate":"2026-10-22T19:44:30-07:00","cveNumber":"CVE-2026-113287","cveTitle":"Chromium CVE-2026-113287: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:30-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113287","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113287","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113287","version":1,"revisionDate":"2026-10-22T19:44:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"05b2effb-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000850576c2","releaseDate":"2026-10-22T19:44:24-07:00","cveNumber":"CVE-2026-113286","cveTitle":"Chromium CVE-2026-113286: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:24-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113286","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113286","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113286","version":1,"revisionDate":"2026-10-22T19:44:24-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"34b7cef5-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000820576c2","releaseDate":"2026-10-22T19:44:17-07:00","cveNumber":"CVE-2026-113285","cveTitle":"Chromium CVE-2026-113285: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:17-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113285","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113285","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113285","version":1,"revisionDate":"2026-10-22T19:44:17-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1fb7cef5-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000830576c2","releaseDate":"2026-10-22T19:44:11-07:00","cveNumber":"CVE-2026-113284","cveTitle":"Chromium CVE-2026-113284: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:11-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113284","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113284","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113284","version":1,"revisionDate":"2026-10-22T19:44:11-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"12bdc7ef-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000880576c2","releaseDate":"2026-10-22T19:44:04-07:00","cveNumber":"CVE-2026-113283","cveTitle":"Chromium CVE-2026-113283: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:44:04-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113283","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113283","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"9.6","temporalScore":"9.6","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113283","version":1,"revisionDate":"2026-10-22T19:44:04-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"a5cbc5e9-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000890576c2","releaseDate":"2026-10-22T19:43:57-07:00","cveNumber":"CVE-2026-113282","cveTitle":"Chromium CVE-2026-113282: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:43:57-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113282","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113282","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113282","version":1,"revisionDate":"2026-10-22T19:43:57-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"7ccbc5e9-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000860576c2","releaseDate":"2026-10-22T19:43:49-07:00","cveNumber":"CVE-2026-113281","cveTitle":"Chromium CVE-2026-113281: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:43:49-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113281","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113281","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113281","version":1,"revisionDate":"2026-10-22T19:43:49-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"5485c8e3-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000870576c2","releaseDate":"2026-10-22T19:43:42-07:00","cveNumber":"CVE-2026-113280","cveTitle":"Chromium CVE-2026-113280: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:43:42-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113280","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113280","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113280","version":1,"revisionDate":"2026-10-22T19:43:42-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"6dcecddd-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000d50244c5","releaseDate":"2026-10-22T19:43:36-07:00","cveNumber":"CVE-2026-113279","cveTitle":"Chromium CVE-2026-113279: Memory corruption","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:43:36-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"],"cweDetailsListForSearch":["cwe: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","cweUrl: https://cwe.mitre.org/data/definitions/119.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113279","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113279","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","https://cwe.mitre.org/data/definitions/119.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113279","version":1,"revisionDate":"2026-10-22T19:43:36-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"3acecddd-50ce-f111-a059-70a8a5b1ff9e"}]},{"id":"00000000-0000-0000-0000-0000d60244c5","releaseDate":"2026-10-22T19:43:30-07:00","cveNumber":"CVE-2026-113278","cveTitle":"Chromium CVE-2026-113278: Use after free","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-22T19:43:30-07:00","description":"

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

\n","cweList":["CWE-416: Use After Free"],"cweDetailsListForSearch":["cwe: CWE-416: Use After Free","cweUrl: https://cwe.mitre.org/data/definitions/416.html"],"unformattedDescription":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","mitreText":"CVE-2026-113278","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113278","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Edge (Chromium-based)","issuingCna":"Chrome","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"8.8","temporalScore":"8.8","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-416: Use After Free","https://cwe.mitre.org/data/definitions/416.html"]}],"articles":[{"articleType":"FAQ","description":"

Why is this Chrome CVE included in the Security Update Guide?

\n

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

\n

How can I see the version of the browser?

\n
    \n
  1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
    2. \n
  2. Click on Help and Feedback
    3. \n
  3. Click on About Microsoft Edge
    4. \n
\n","ordinal":100}],"revisions":[{"cveNumber":"CVE-2026-113278","version":1,"revisionDate":"2026-10-22T19:43:30-07:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"97ed32d7-50ce-f111-a059-70a8a5b1ff9e"}]}],"@odata.nextLink":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/vulnerability?$skip=500"}