PT-2026-81719

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Views. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit...

PT-2026-81557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Views, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering ...

PT-2026-81728

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Views allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

Astra Linux – Vulnerability in Chromium

Before version 103.0.5060.134, using free in Views in Google Chrome allowed a remote attacker who convinced a user to engage in certain user interactions to potentially exploit heap corruption through UI interactions...

Astra Linux – Vulnerability in PostgresSQL 11

PostgreSQL optimizer statistics enable users to read sampled data within views that the user cannot access. Additionally, statistics allow users to access sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; th...

Astra Linux – Vulnerability in SQLite3

In SQLite 3.31.1, there is an out-of-bounds access issue involving the ALTER TABLE operation for views that contain nested FROM clauses...

Astra Linux – Vulnerability in SQLite3

In SQLite, from version 3.30.1 onwards, alter.c allows attackers to trigger infinite recursion through certain types of self-referential views in conjunction with ALTER TABLE statements...

CVE-2026-71572

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

CVE-2026-71572

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

CVE-2026-71572 Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

CVE-2026-71572

Joomla! 3.0.0–5.4.7 and 6.0.0–6.1.2 lack output processing in multiple download views, enabling HTTP response header injection. This allows reflected file download and content-type confusion attacks. Exploitation requires high privileges and passive user interaction; no active exploitation is rep...

CVE-2026-71572 Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

EUVD-2026-61030

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

CVE-2026-71572

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

PT-2026-77191

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 3.0.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description Lack of output processing in multiple download views allows for response header injection. This issue can lead to reflected file download or...

UBUNTU-CVE-2026-71194

In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...

CVE-2026-19158

A flaw was found in Google Chrome. A use-after-free vulnerability in the Views component could allow a remote attacker to exploit heap corruption. This can occur if a user is convinced to engage in specific user interface UI gestures while visiting a specially crafted HTML page, potentially leadi...

CVE-2026-72791 SiYuan before v3.7.4 Information Disclosure via getAttributeViewFieldViews

SiYuan v3.7.4-alpha.1 a pre-release; the endpoint does not exist in stable v3.7.3 or earlier contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role...

CVE-2026-19158 Use after free in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...