2026-43 - Apple, Adobe, Oracle, Mozilla, Canonical, Red Hat, Cisco, Microsoft, Jenkins 🗂️

AdvisoryWeekNov 2, 2026

Advisory Week

Week 43, 2026

CISA Known Exploited Vulnerabilities

PHP Memory Corruption Vulnerability CVE-2026-109618

PHP Stale Internal Request-State Vulnerability CVE-2026-109619

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-48356

Google Brotli Unchecked Return Value Vulnerability CVE-2026-111497

Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-41709

Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CVE-2026-97229

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Poin CVE-2026-76418

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability CVE-2026-118527

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-111357

The known exploited vulnerabilities list contains vulnerabilities that are known to be actively exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.

Apple Security Advisory

Xcode 27.2 - Apple Security Content

iOS 27.2 and iPadOS 27.2 - Apple Security Content

iOS 26.7.2 and iPadOS 26.7.2 - Apple Security Content

iOS 18.7.11 and iPadOS 18.7.11 - Apple Security Content

macOS Golden Gate 27.2 - Apple Security Content

macOS Tahoe 26.7.2 - Apple Security Content

macOS Sequoia 15.8.2 - Apple Security Content

tvOS 27.2 - Apple Security Content

watchOS 27.2 - Apple Security Content

visionOS 27.2 - Apple Security Content

Safari 27.2 - Apple Security Content

National Cyber Awareness System

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Adobe Security Bulletins and Advisories

Adobe Campaign Classic Security Bulletin APSB26-162

Substance 3D Painter Security Bulletin APSB26-178

Adobe Creative Cloud Desktop Application Security Bulletin APSB26-135

Adobe Connect Security Bulletin APSB26-182

Oracle Security Alerts

Oracle Security Alert Advisory for CVE-2026-109618 and CVE-2026-109619

Mozilla Security Advisories

Security Vulnerabilities fixed in Firefox ESR 153.6 mfsa2026-120

Security Vulnerabilities fixed in Firefox ESR 115.44 mfsa2026-119

Security Vulnerabilities fixed in Firefox 159 mfsa2026-118

Security Vulnerabilities fixed in Thunderbird 153.6 mfsa2026-122

Security Vulnerabilities fixed in Thunderbird 159 mfsa2026-121

Security Vulnerabilities fixed in Firefox for iOS 156.1 mfsa2026-117

Ubuntu Security Notices

.NET vulnerabilities: USN-8958-1

Brotli vulnerability: USN-8956-2 / USN-8956-1

authd vulnerability: USN-8957-1

nginx vulnerabilities: USN-8955-1

Red Hat Security Advisory

Critical: python-pillow security update: RHSA-2026:93077

Important: bind9.18 security update: RHSA-2026:93072

Critical: ipa security update: RHSA-2026:93071

Important: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update: RHSA-2026:93065

Important: kernel-rt security, bug fix, and enhancement update: RHSA-2026:93047 / RHSA-2026:92208

Important: Red Hat OpenStack Services on OpenShift 18.0 (python-botocore) security update: RHSA-2026:93046

Important: Red Hat OpenStack Platform 17.1 (python-botocore) security update: RHSA-2026:93045

Important: Red Hat OpenStack Platform 16.2 (python-botocore) security update: RHSA-2026:93044

Important: Red Hat OpenStack Platform 13.0 (python-botocore) security update: RHSA-2026:93043

Important: kernel security update: RHSA-2026:92997 / RHSA-2026:91585 / RHSA-2026:91493 / RHSA-2026:90933

Important: kernel security, bug fix, and enhancement update: RHSA-2026:92993 / RHSA-2026:92209 / RHSA-2026:91565

Red Hat Hardened Images RPMs bug fix and enhancement update: RHSA-2026:92905 / RHSA-2026:92902 / RHSA-2026:92808 / RHSA-2026:92811 / RHSA-2026:92789 / RHSA-2026:92809 / RHSA-2026:92066 / RHSA-2026:91393 / RHSA-2026:90986 / RHSA-2026:90995 / RHSA-2026:90996 / RHSA-2026:90366 / RHSA-2026:90533 / RHSA-2026:90305 / RHSA-2026:89193

Moderate: curl security update: RHSA-2026:92907

Important: pcre2 security update: RHSA-2026:92901 / RHSA-2026:92899

Important: tomcat security update: RHSA-2026:92872

Important: tomcat security, bug fix, and enhancement update: RHSA-2026:92863

Critical: Satellite 6.19 security update: RHSA-2026:92861

Important: Satellite 6.18 security update: RHSA-2026:92860

Important: Satellite 6.17 security update: RHSA-2026:92859

Important: Satellite 6.16 EUS security update: RHSA-2026:92858

Red Hat Ansible Automation Platform 2.6 Container Release Update: RHSA-2026:92856

Red Hat Ansible Automation Platform 2.7 Container Release Update: RHSA-2026:92848

Important: java-17-openjdk security update for RHEL 9: RHSA-2026:90500

Important: java-21-openjdk security update for RHEL 8 and 9: RHSA-2026:88349

Important: perl-XML-LibXML security update: RHSA-2026:92800 / RHSA-2026:92798

Important: dnsmasq security, bug fix, and enhancement update: RHSA-2026:92677

Important: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update: RHSA-2026:92622

satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview: RHSA-2026:92667 / RHSA-2026:92666

Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update: RHSA-2026:92650

General availability of the satellite/iop-advisor-backend-rhel9 container image: RHSA-2026:92628 / RHSA-2026:92595

satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview: RHSA-2026:92620 / RHSA-2026:92619

Logging for Red Hat OpenShift - 6.6.2: RHSA-2026:92593 / RHSA-2026:92515

Technical preview of the satellite/iop-vmaas-rhel9 container image: RHSA-2026:92588 / RHSA-2026:92574

General availability of the satellite/iop-remediations-rhel9 container image: RHSA-2026:92584 / RHSA-2026:92578

General availability of the satellite/iop-host-inventory-rhel9 container image: RHSA-2026:92583 / RHSA-2026:92566

Important: nodejs:24 security, bug fix, and enhancement update: RHSA-2026:92378 / RHSA-2026:92376

Red Hat OpenShift Service Mesh 3.4.4: RHSA-2026:92516

RHOAI 3.4.6 - Red Hat OpenShift AI: RHSA-2026:92510

Red Hat OpenShift Service Mesh 3.3.9: RHSA-2026:92509

Red Hat OpenShift Service Mesh 3.2.11: RHSA-2026:92497

Important: .NET 8.0 security, bug fix, and enhancement update: RHSA-2026:92492

Red Hat OpenShift Service Mesh 3.1.14: RHSA-2026:92480

Important: python3.12-urllib3 security update: RHSA-2026:92474

Red Hat Enterprise Linux AI 3.5.2 enhancement update: RHSA-2026:92452 / RHSA-2026:92449

Red Hat OpenShift Service Mesh 3.0.17: RHSA-2026:92451

Important: .NET 10.0 security, bug fix, and enhancement update: RHSA-2026:92432

Important: .NET 9.0 security, bug fix, and enhancement update: RHSA-2026:92429

Important: librsvg2 security update: RHSA-2026:92382 / RHSA-2026:92353 / RHSA-2026:92336 / RHSA-2026:92218 / RHSA-2026:92214 / RHSA-2026:92213 / RHSA-2026:92212

Important: osbuild-composer security update: RHSA-2026:92372 / RHSA-2026:91958 / RHSA-2026:91646 / RHSA-2026:91587 / RHSA-2026:90493 / RHSA-2026:90363

Critical: OpenJDK 21.0.13 Security Update for Windows Builds: RHSA-2026:88351

Critical: OpenJDK 21.0.13 Security Update for Portable Linux Builds: RHSA-2026:88350

Important: flatpak security update: RHSA-2026:92369 / RHSA-2026:92221 / RHSA-2026:90364 / RHSA-2026:89859 / RHSA-2026:89850 / RHSA-2026:89849

Important: curl security, bug fix, and enhancement update: RHSA-2026:92368

Important: firefox security update: RHSA-2026:92363 / RHSA-2026:92327 / RHSA-2026:92335 / RHSA-2026:92228 / RHSA-2026:92226 / RHSA-2026:92227 / RHSA-2026:92012 / RHSA-2026:92011

Moderate: kernel security update: RHSA-2026:92362 / RHSA-2026:91648 / RHSA-2026:89890 / RHSA-2026:89816

Important: libxml2 security update: RHSA-2026:92352

Important: sudo security update: RHSA-2026:92349 / RHSA-2026:92326 / RHSA-2026:92325 / RHSA-2026:90287

Important: libsoup security update: RHSA-2026:92347

Important: expat security update: RHSA-2026:92323

LVMS 4.16 Bug Fix and Enhancement update: RHSA-2026:92291

Important: flatpak-builder security update: RHSA-2026:92220

Important: rhc security update: RHSA-2026:92217 / RHSA-2026:90726 / RHSA-2026:90725 / RHSA-2026:89915 / RHSA-2026:89908 / RHSA-2026:89892 / RHSA-2026:89832 / RHSA-2026:89741

Critical: webkit2gtk3 security update: RHSA-2026:92216 / RHSA-2026:89822 / RHSA-2026:89821

Critical: mod_auth_openidc:2.3 security update: RHSA-2026:92160 / RHSA-2026:92159 / RHSA-2026:92158 / RHSA-2026:92157

Critical: cjose security update: RHSA-2026:92156 / RHSA-2026:92155 / RHSA-2026:92154 / RHSA-2026:92145

A Subscription Management tool for finding and reporting Red Hat product usage: RHSA-2026:92136 / RHSA-2026:91967

Important: mrtg security update: RHSA-2026:92071 / RHSA-2026:92051 / RHSA-2026:91845 / RHSA-2026:91844 / RHSA-2026:91843 / RHSA-2026:91644

Important: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 security update: RHSA-2026:92063

Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update: RHSA-2026:92062

Important: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update: RHSA-2026:92061

Important: Red Hat JBoss Enterprise Application Platform 8.1.9 security update: RHSA-2026:92059 / RHSA-2026:92057

Red Hat OpenShift Dev Spaces 3.31.1 Release.: RHSA-2026:92006

Red Hat OpenShift Dev Spaces 3.31.1 RHEL 10 Container Release.: RHSA-2026:91997

Important: ignition security update: RHSA-2026:91720 / RHSA-2026:91719 / RHSA-2026:90519 / RHSA-2026:90518 / RHSA-2026:90514 / RHSA-2026:90513

Red Hat Hardened Images RPMs Security Update: RHSA-2026:91709 / RHSA-2026:91665 / RHSA-2026:91647 / RHSA-2026:91645 / RHSA-2026:91643 / RHSA-2026:91483 / RHSA-2026:91480 / RHSA-2026:91476 / RHSA-2026:91471 / RHSA-2026:91462 / RHSA-2026:91460 / RHSA-2026:91459 / RHSA-2026:91444 / RHSA-2026:91412 / RHSA-2026:91401 / RHSA-2026:91389 / RHSA-2026:91385 / RHSA-2026:91378 / RHSA-2026:91376 / RHSA-2026:91368 / RHSA-2026:91292 / RHSA-2026:91181 / RHSA-2026:90990 / RHSA-2026:90388 / RHSA-2026:90325

Red Hat Developer Hub 1.9.10 release.: RHSA-2026:91651

Important: kpatch-patch-5_14_0-687_10_1 and kpatch-patch-5_14_0-687_42_1 security update: RHSA-2026:91650

OpenShift Container Platform 4.16 CNF IBU extras update: RHSA-2026:91640

Important: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update: RHSA-2026:91639

Important: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update: RHSA-2026:91638

Important: webkit2gtk3 security update: RHSA-2026:91636 / RHSA-2026:91580

OpenShift Container Platform 4.14 CNF IBU extras update: RHSA-2026:91635

Important: thunderbird security update: RHSA-2026:91634 / RHSA-2026:91633 / RHSA-2026:90913

Release of components for Service Telemetry Framework 1.5.7: RHSA-2026:91632

Critical: webkitgtk4 security update: RHSA-2026:91631

Important: xdg-dbus-proxy security update: RHSA-2026:91626 / RHSA-2026:91625 / RHSA-2026:91624 / RHSA-2026:91623 / RHSA-2026:90523 / RHSA-2026:90522

Red Hat OpenShift API for Data Protection: RHSA-2026:91613

Important: libXtst security update: RHSA-2026:91612 / RHSA-2026:91294

Important: python-tornado security update: RHSA-2026:91583 / RHSA-2026:90777

Important: rsyslog security update: RHSA-2026:91582 / RHSA-2026:90349

Important: yggdrasil security update: RHSA-2026:91572 / RHSA-2026:91138

Moderate: ansible-collection-redhat-leapp security update: RHSA-2026:91490

Important: ansible-collection-redhat-leapp security update: RHSA-2026:91491

Important: libX11 security update: RHSA-2026:91365 / RHSA-2026:91366 / RHSA-2026:89730

Important: Red Hat Service Interconnect 2.2.4 Release (images): RHSA-2026:91342

Important: Red Hat Service Interconnect 2.2.4 Release (rpms): RHSA-2026:91329

Critical: OpenShift Container Platform 4.22.20 bug fix and security update: RHSA-2026:89197

Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP1): RHSA-2026:91304

Moderate: libXi security update: RHSA-2026:91056 / RHSA-2026:91268

Important: libXrender security update: RHSA-2026:91267 / RHSA-2026:91057

Moderate: grafana security update: RHSA-2026:90811

Important: cjose security update: RHSA-2026:90812

Red Hat AI Base Images 3.5.5 (Neuron): RHSA-2026:91249

Critical: ca-certificates and nss security update: RHSA-2026:90985

Red Hat AI Base Images 3.4.6 (Neuron): RHSA-2026:91248

Red Hat AI Base Images 3.5.5 (ROCm 7.14): RHSA-2026:91246

Red Hat AI Base Images 3.4.6 (Spyre): RHSA-2026:91245

Red Hat AI Base Images 3.4.6 (ROCm 6.4): RHSA-2026:91244

Red Hat AI Base Images 3.0.7 (TPU): RHSA-2026:91243

Red Hat AI Base Images 3.5.5 (Spyre): RHSA-2026:91242

Red Hat AI Base Images 3.4.6 (CPU): RHSA-2026:91241

Red Hat AI Base Images 3.5.5 (CUDA 13.0): RHSA-2026:91238

Red Hat AI Base Images 3.5.5 (CUDA 12.9): RHSA-2026:91237

Red Hat AI Base Images 3.0.7 (CUDA): RHSA-2026:91236

Red Hat AI Base Images 3.4.6 (CUDA 13.0): RHSA-2026:91235

Red Hat AI Base Images 3.4.6 (Gaudi): RHSA-2026:91234

Red Hat AI Base Images 3.4.6 (TPU): RHSA-2026:91233

Red Hat AI Base Images 3.0.7 (CPU): RHSA-2026:91232

Red Hat AI Base Images 3.5.5 (Rubin): RHSA-2026:91224

Red Hat AI Base Images 3.0.7 (ROCm): RHSA-2026:91219

Red Hat AI Base Images 3.4.6 (CUDA 12.9): RHSA-2026:91218

Red Hat AI Base Images 3.4.6 (ROCm 7.1): RHSA-2026:91217

Red Hat Cost Management On-Premise container image update: RHSA-2026:91216

Red Hat AI Base Images 3.5.5 (Gaudi): RHSA-2026:91207

Red Hat AI Base Images 3.0.7 (Spyre): RHSA-2026:91206

Red Hat AI Base Images 3.5.5 (CPU): RHSA-2026:91204

Red Hat AI Base Images 3.5.5 (TPU): RHSA-2026:91202

Critical: OpenShift Container Platform 4.12.102 bug fix and security update: RHSA-2026:90272

Critical: OpenShift Container Platform 4.16.74 bug fix and security update: RHSA-2026:89714

Important: JWS Operator v2.3.4 for OpenShift: RHSA-2026:91001

Moderate: gcc-toolset-15-gcc security update: RHSA-2026:90915

Important: go-toolset:rhel8 security, bug fix, and enhancement update: RHSA-2026:90994

Important: OpenShift Container Platform 4.12.102 packages and security update: RHSA-2026:90271

Critical: OpenShift Container Platform 4.14.77 bug fix and security update: RHSA-2026:89838

Important: brotli security, bug fix, and enhancement update: RHSA-2026:90914

LVMS 4.15 Bug Fix and Enhancement update: RHSA-2026:90950

Important: OpenShift Container Platform 4.16.74 packages and security update: RHSA-2026:89713

Important: Red Hat build of Quarkus 3.33.4.SP1 release and security update: RHSA-2026:90311

Critical: OpenShift Container Platform 4.18.59 bug fix and security update: RHSA-2026:89725

Important: Red Hat build of Quarkus 3.27.6.SP1 release and security update: RHSA-2026:90290

Critical: OpenShift Container Platform 4.21.40 bug fix and security update: RHSA-2026:89232

Critical: OpenShift Container Platform 4.20.44 bug fix and security update: RHSA-2026:89333

Critical: OpenShift Container Platform 4.19.53 bug fix and security update: RHSA-2026:89651

Important: emacs security update: RHSA-2026:90887 / RHSA-2026:90800

Important: python-urllib3 security update: RHSA-2026:90759 / RHSA-2026:90494

LVMS 4.14 Bug Fix and Enhancement update: RHSA-2026:90758

Important: git-lfs security update: RHSA-2026:90757

Important: OpenShift Container Platform 4.21.40 packages and security update: RHSA-2026:89229

Important: brotli security update: RHSA-2026:90501 / RHSA-2026:90495 / RHSA-2026:90449

Important: libreswan security update: RHSA-2026:90492 / RHSA-2026:89923 / RHSA-2026:89748

Important: skopeo security update: RHSA-2026:90462

Important: php:8.3 security update: RHSA-2026:89111

Important: Red Hat build of MicroShift 4.22.20 security update: RHSA-2026:89817

Red Hat Enterprise Linux AI 3.4.6 security update: RHSA-2026:90440 / RHSA-2026:90432

Important: buildah security update: RHSA-2026:90424

Important: Red Hat build of MicroShift 4.21.40 security update: RHSA-2026:89818

Important: podman security update: RHSA-2026:90362

Important: Red Hat OpenShift GitOps v1.21.4 security update: RHSA-2026:90337

Important: python-lxml security update: RHSA-2026:90336 / RHSA-2026:90327 / RHSA-2026:90326

Important: RHOSO 18.0 os-diff security update: RHSA-2026:90332

Important: Red Hat OpenStack Platform 17.1 security advisory: RHSA-2026:90329

Moderate: bind security update: RHSA-2026:90328

Important: Red Hat OpenShift GitOps v1.20.7 security update: RHSA-2026:90323

Red Hat OpenShift Dev Spaces 3.31.0 Release.: RHSA-2026:90321

LVMS 4.13 Bug Fix and Enhancement update: RHSA-2026:90317

Red Hat OpenShift Dev Spaces 3.31.0 RHEL 10 Container Release.: RHSA-2026:90314

Important: delve security update: RHSA-2026:89888 / RHSA-2026:89885 / RHSA-2026:89884

Important: httpd security update: RHSA-2026:89860

Critical: idm:DL1 security, bug fix, and enhancement update: RHSA-2026:89836

Moderate: gcc security update: RHSA-2026:89830

Moderate: kernel-rt security update: RHSA-2026:89814

Moderate: xz security update: RHSA-2026:89749

Moderate: freeipmi security, bug fix, and enhancement update: RHSA-2026:89753

Important: compat-openssl11 security update: RHSA-2026:89738 / RHSA-2026:89737 / RHSA-2026:89736

Important: jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update: RHSA-2026:89734

Important: grafana security update: RHSA-2026:89732

FortiGuard Threat Signals

Node.js Brotli Remote Code Execution (Nodel2Shell)

Cisco Security Advisory

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

Vulnerabilities in node.js Affecting Cisco Products: October 2026

Microsoft Security

Microsoft November 2026 Security Update Guide

Chromium: CVE-2026-118304 Improper input validation in SVG

Chromium: CVE-2026-118313 Use after free in Video

Chromium: CVE-2026-118311 Memory corruption in Media

Chromium: CVE-2026-118317 Memory corruption in HTML

Chromium: CVE-2026-118315 Improper input validation in SVG

Chromium: CVE-2026-118312 Memory corruption in Paint

Chromium: CVE-2026-118316 Improper input validation in V8

Chromium: CVE-2026-118318 Improper access control in V8

Chromium: CVE-2026-118308 Use after free in SVG

Chromium: CVE-2026-118310 Improper input validation in Views

Chromium: CVE-2026-118305 Memory corruption in Turbolev

Chromium: CVE-2026-118307 Use after free in Paint

Chromium: CVE-2026-118306 Memory corruption in FileSystem

Chromium: CVE-2026-118319 Memory corruption in Skia

Chromium: CVE-2026-118322 Memory corruption in ANGLE

Chromium: CVE-2026-118328 Improper input validation in WebRTC

Chromium: CVE-2026-118327 Memory corruption in Media

Chromium: CVE-2026-118332 Improper input validation in Compositing

Chromium: CVE-2026-118320 Memory corruption in V8

Chromium: CVE-2026-118334 Use after free in ImageCapture

Chromium: CVE-2026-118331 Improper input validation in FileAPI

Chromium: CVE-2026-118330 Use after free in Browser

Chromium: CVE-2026-118333 Missing authorization in Video

Chromium: CVE-2026-118335 Improper input validation in Metrics

Chromium: CVE-2026-118329 Improper input validation in ANGLE

Chromium: CVE-2026-118336 Improper input validation in Headless

Chromium: CVE-2026-118337 Improper access control in Forms

Chromium: CVE-2026-118338 Use after free in Animation

Chromium: CVE-2026-118339 Use after free in Animation

Chromium: CVE-2026-118340 Memory corruption in Skia

Chromium: CVE-2026-118341 Use after free in Modularization

Chromium: CVE-2026-118342 Out of bounds write in Editing

Chromium: CVE-2026-118343 Improper input validation in ReadingList

Chromium: CVE-2026-118344 Use after free in Layout

Chromium: CVE-2026-118345 Use after free in PDFium

Chromium: CVE-2026-118346 Use after free in Compositing

Chromium: CVE-2026-118347 Use after free in FileSystem

Chromium: CVE-2026-118348 Improper input validation in Skia

Chromium: CVE-2026-118349 Memory corruption in Payments

Chromium: CVE-2026-118350 Use after free in Turbolev

Chromium: CVE-2026-118351 Memory corruption in Skia

Chromium: CVE-2026-118352 Memory corruption in Cache

Chromium: CVE-2026-118353 Use after free in Paint

Chromium: CVE-2026-118354 Improper input validation in Skia

Chromium: CVE-2026-118355 Improper input validation in Command

Chromium: CVE-2026-118356 Use after free in WTF

Chromium: CVE-2026-118357 Use after free in FileSystem

Chromium: CVE-2026-118358 Memory corruption in WebAudio

Chromium: CVE-2026-118359 Memory corruption in V8

Chromium CVE-2026-91732: Missing authorization

CVE-2026-118147 Visual Studio Spoofing Vulnerability

CVE-2026-69446 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2026-96196 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability

CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

Jenkins Security Advisories

Jenkins Security Advisory 2026-10-28

Amazon AWS Security Advisories

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

NVIDIA Security Bulletins

Security Bulletin: - NVIDIA - TensorRT LLM - October 2026

Security Bulletin: NeMo Agent Toolkit - October 2026

Security Bulletin: - NVIDIA PhysX - October 2026

Google Chrome Updates

Chrome Releases: Chrome for Android Update (version 156)

Chrome Releases: Stable Channel Update for Desktop (version 156.0.8078.79)

Chrome Releases: Chrome Stable for iOS Update (version 157)

Chrome Releases: Stable Channel Update for Desktop (version 156.0.8078.73)

Chrome Releases: Chrome for Android Update (version 156)

Switch to Daily Mode

We're thrilled to announce the launch of AdvisoryDaily, a once a day version of this newsletter.

Get AdvisoryDaily

AdvisoryWeek © Foundeo Inc. 2026 PO Box 8253, Utica NY 13505, United States