Google Chrome Vulnerability: CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146134 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to...

Planet Technology Planet WGS-804HPT Stack-Based Buffer Overflow (CVE-2024-48871)

PLANET WGS-804HPT is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution. This plugin only works with...

PT-2026-127268

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127258

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption exists in the FileSystem component. This issue allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to open a...

PT-2026-127262

Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118310

Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-126695

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chan sip channel...

PT-2026-126711

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

PT-2026-127261

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127264

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-118305

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118345

Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127272

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in V8, the JavaScript engine used by Google Chrome, allows a remote attacker to potentially execute arbitrary code inside the browser security sandbox. This is achieve...

PT-2026-127302

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127279

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-127291

Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127267

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...