Critical severity threats

Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

A buffer overflow vulnerability exists in the Skia component of Google Chrome prior to version 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability has been assigned a critical severity rating with a CVSS score of 9.6. A fix is available in Chrome version 157.0.8103.38.

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-121071 is a critical security vulnerability in Google Chrome's FileSystem component prior to version 157.0.8103.38. It involves incorrect authorization that allows a remote attacker, through social engineering and a crafted HTML page, to potentially execute arbitrary code outside the browser sandbox. The vulnerability has been fixed in Chrome version 157.0.8103.38.

A high-severity memory corruption vulnerability exists in the GPU component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.38.

Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via PUT request. Where the certificate authority autosigns requests without strong verification, an unauthenticated network attacker can obtain such a certificate.

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions. SessionContext.getApplicableRolePermissions reads a missing or null DefaultRolePermissions metadata value instead of the configured namespace field, and the null result is treated permissively. An anonymous network client can consequently write variables with CurrentWrite access or call bound methods when an operator configured a restrictive namespace default and relied on inheritance. Servers with no declared policy, nodes with explicit per-node permissions, and correctly bound programmatic namespace metadata are outside the authorization-bypass case. This issue is fixed in version 2.180.0.

A critical vulnerability exists in Red Hat AI Inference 3.5.3 (CUDA) related to the vLLM component. The system downloads and decodes remote or embedded media files before enforcing size and quantity limits, allowing a remote attacker to submit excessively large or numerous media payloads. This leads to resource exhaustion, causing denial of service by making the service unresponsive or crashing it. The flaw does not allow code execution or data exposure. Mitigations include restricting network access, blocking outbound connections to prevent fetching untrusted media, and enforcing request size limits at proxies.

Red Hat AI Inference Model Optimization Tools 3.5.3 (CUDA) is referenced in a critical security advisory by Red Hat. The advisory lists numerous CVEs associated with the product but does not provide specific details or fixes for CVE-2026-96636 or related vulnerabilities. One related CVE (CVE-2026-111063) involves a low-severity flaw in aiohttp where the Secure attribute on shared cookies is not properly enforced, potentially exposing sensitive information over unencrypted connections. No fixes are currently available for the listed vulnerabilities in the AI Inference Model Optimization Tools. The advisory does not specify affected versions or mitigation steps beyond general awareness.