212385 matches found
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
CVE-2026-87625
CVE-2026-87625 is a use-after-free vulnerability in V8 , the JavaScript engine used by Google Chrome, affecting versions prior to 153.0.8010.36 . A remote attacker can exploit it via a crafted Chrome extension delivered through social engineering to execute arbitrary code inside the Chrome sandbo...
CVE-2026-87625
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-74527
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87504
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87587
A use-after-free flaw in the V8 JavaScript engine of Google Chrome (versions prior to 153.0.8010.36 ) allows a remote attacker to execute arbitrary code inside the Chrome sandbox by luring a user into visiting a crafted HTML page. The vulnerability was rated High by Chromium and assigned a CVSS 3...
EUVD-2026-74506
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-74488
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87444
CVE-2026-87444 is a memory corruption vulnerability in the Codecs component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can execute arbitrary code inside the browser sandbox by luring a user into visiting a crafted HTML page. The vulnerability carries a CVSS 3.1 score of 8...
CVE-2026-87585
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
EUVD-2026-74481
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-36433
Actions Semiconductor Media Player Utilities v.4.46 contains an arbitrary code execution vulnerability in the firmware update toolkit components Production.dll and RdiskUpgrade.exe . According to PT Security, the toolkit performs no signature verification, no checksum, and no authentication , all...
Linux Distros Unpatched Vulnerability : CVE-2026-87817
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like...
Linux Distros Unpatched Vulnerability : CVE-2026-87506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute...
CVE-2026-71612
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...
CVE-2026-71614
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...
CVE-2026-71612
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...
CVE-2026-71614
CVE-2026-71614 is a local arbitrary code execution vulnerability in the GPAC multimedia framework, specifically in the src/media_tools/dvb_mpe.c file via the descriptorTime_slice_fec_identifier() and gf_m2ts_ipdatagram_reader() functions. Affected commits are at or before c2dee3aff638; the fix is...