Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Vulnerabilities & exploits Chromium: CVE-2026-118351 Memory corruption in SkiaThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118352 Memory corruption in CacheThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118353 Use after free in PaintThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118354 Improper input validation in SkiaThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118355 Improper input validation in CommandThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118356 Use after free in WTFThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118357 Use after free in FileSystemThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118358 Memory corruption in WebAudioThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium: CVE-2026-118359 Memory corruption in V8This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits Chromium CVE-2026-91732: Missing authorizationThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Microsoft Security Response Center · Global · 31 Oct 2026
Vulnerabilities & exploits CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoderInformation published. Microsoft Security Response Center · Global · 31 Oct 2026
Network & security devices CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security Advisories · Global · 31 Oct 2026
Network & security devices Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesBetween October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an… Cisco Security Advisories · Global · 30 Oct 2026
Network & security devices Vulnerabilities in Node.js Affecting Cisco Products: October 2026On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The… Cisco Security Advisories · Global · 30 Oct 2026
Network & security devices Vulnerabilities in PHP Affecting Cisco Products: October 2026On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vulnerabilities, see the advisories… Cisco Security Advisories · Global · 30 Oct 2026
Vulnerabilities & exploits CVE-2026-70125 Microsoft Office Outlook Remote Code Execution VulnerabilityUpdated one or more CVSS scores for the affected products. This is an informational change only. Microsoft Security Response Center · Global · 30 Oct 2026
Threats, ransomware & breaches CVE-2026-118147 Visual Studio Spoofing VulnerabilityImproper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. Microsoft Security Response Center · Global · 30 Oct 2026
Vulnerabilities & exploits CVE-2026-69446 Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCorrected CVE by adding the assigning CNA. This is an informational change only. Microsoft Security Response Center · Global · 30 Oct 2026
Network & security devices CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security Advisories · Global · 29 Oct 2026
Network & security devices Cisco Finesse Server-Side Request Forgery VulnerabilityA vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker… Cisco Security Advisories · Global · 29 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.