CVE-2026-11223 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11223

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11223

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2025-11223

creationtimestamp| type| source ---|---|--- 2025-10-03 09:03:01+00:00| seen| Telegram/3As-d2HMeVhTZVDQpwDrT5YAUZOkt5PrRI1Wrq88gkWUms8...

CVE-2025-11223

Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...

CVE-2020-11223

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2024-11223

The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-11223 WPForms < 1.9.2.3 - Admin+ Stored XSS

The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-11223

Summary (CVE-2024-11223): The WPForms WordPress plugin, versions prior to 1.9.2.3, fails to sanitise and escape certain settings. This allows high-privilege users (e.g., admins) to perform Stored Cross-Site Scripting (XSS) even when unfiltered_html is disallowed (e.g., multisite). The vulnerabili...

CVE-2020-11223

creationtimestamp| type| source ---|---|--- 2021-02-22 12:28:07+00:00| seen| https://t.me/cibsecurity/23905...

CVE-2020-11223

CVE-2020-11223 affects Qualcomm camera driver components (Snapdragon family). Root cause: out-of-bounds write due to lack of validation of array index before copying into an array. Impact described as high with local attacker access and potential to compromise confidentiality, integrity, and avai...

CVE-2019-11223

The CVE-2019-11223 entry corresponds to the WordPress plugin SupportCandy (versions up to 2.0.0). The vulnerability is described as an Unrestricted File Upload that enables remote attackers to execute arbitrary code by uploading a file with an executable extension. Multiple connected sources conf...

CVE-2018-11223

Artica Pandora FMS is affected by CVE-2018-11223, with versions before 7.0 NG 723 vulnerable to cross-site scripting via the crafted refr parameter in the call to /pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=. The vulnerability enables an attacker to execute arb...

CVE-2017-11223

Technical details for CVE-2017-11223 are not publicly available in the provided connected documents. Monitor for updates.

Adobe Acrobat And Reader Use After Free (APSB17-24: CVE-2017-11223)

A use after free vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to a freed memory area being reused by another object. This provides a remote attacker with an unintended memory access -- potentially leading to code corruption, control-flow hijack, or information leak...