Lucene search
+L

252846 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•6 views

CVE-2026-87430: Heap-based Buffer Overflow

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS8.5AI score0.00573EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/09 12:00 a.m.•44 views

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

0.00695EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 12:00 a.m.•26 views

EUVD-2026-75164

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

6.3AI score0.00695EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-87636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

8.8CVSS8.3AI score0.00451EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/09 12:00 a.m.•12 views

CVE-2026-71612

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...

8.4CVSS6.7AI score
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/09 12:00 a.m.•13 views

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

7.8CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•13 views

CVE-2026-36433: Improper Control of Generation of Code

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

9.8CVSS6.3AI score0.00695EPSS
SaveExploits0References2
Mend
Mend
•added 2026/09/09 12:00 a.m.•11 views

CVE-2026-71612

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...

8.6CVSS6.9AI score0.00208EPSS
SaveExploits0References4
Redos
Redos
•added 2026/09/09 12:00 a.m.•10 views

ROS-20260909-73-0004

The vulnerability in Chromium is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS8.7AI score0.00345EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87644: Incorrect Authorization

Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

8.3CVSS7AI score0.00389EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•20 views

PT-2026-88924

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

6.6AI score0.00541EPSS
SaveExploits1References3
Redos
Redos
•added 2026/09/09 12:00 a.m.•9 views

ROS-20260909-73-0107

The vulnerability in Chromium is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

4.3CVSS7AI score0.00191EPSS
SaveExploits0
Redos
Redos
•added 2026/09/09 12:00 a.m.•7 views

ROS-20260909-73-0037

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.9AI score0.00203EPSS
SaveExploits0
Redos
Redos
•added 2026/09/09 12:00 a.m.•10 views

ROS-20260909-73-0020

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.7AI score0.00345EPSS
SaveExploits0
Redos
Redos
•added 2026/09/09 12:00 a.m.•6 views

ROS-20260909-73-0018

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00137EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/09 12:00 a.m.•16 views

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

6.4AI score0.00695EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-87510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially...

8.3CVSS8.3AI score0.00432EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-87506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute...

8.3CVSS8.2AI score0.00404EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/09 12:00 a.m.•6 views

ROS-20260909-73-0008

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.7AI score0.00345EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87457: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

8.1CVSS7AI score0.001EPSS
SaveExploits0References3
Rows per page
Query Builder