CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

CVE-2026-19152

A flaw was found in Chromium. Insufficient policy enforcement within the Navigation component allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape. This vulnerability can be exploited via a specially crafted HTML page, leading to a bypass of...

CVE-2026-19145

A flaw was found in the Translate component of Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected syst...

CVE-2026-19138

A flaw was found in Google Chrome's CrashReporting component. A heap buffer overflow vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially escape the browser's security sandbox by crafting a malicious HTML page. This could lead to further...

Malicious code in developer-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde7491a839ea8dc199215ce4c506b89ec0d9a9b1cded593b063a5b9b7015509 The package presents itself as a 'developer dashboard' but ships a heavily obfuscated single-file payload obfuscator.io-style 0xXXXX identifiers with...

CVE-2026-17061

CVE-2026-17061 affects SIMULIA Execution Engine (Release 2023–2026). The issue is deserialization of untrusted data enabling unauthenticated remote code execution over a network with no user interaction. CVSS v3.1 base score 10.0 (CRITICAL), impact on confidentiality, integrity, and availability ...

EUVD-2026-56155

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution...

CVE-2026-17061 Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution...

CVE-2026-48046

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote...

.NET Core Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an unauthorized attacker to execute code locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...

Microsoft PowerPoint Remote Code Execution Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Office Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...