Chromium: CVE-2026-13811 Use after free in IME

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13811

creationtimestamp| type| source ---|---|--- 2026-07-01 19:48:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbw2ej462q 2026-07-02 07:19:28+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:26:39+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-13811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

DEBIAN-CVE-2026-13811

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13811

CVE-2026-13811 describes a use-after-free in the IME component of Google Chrome prior to 150.0.7871.47, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability affects Chrome’s input-method editor (IME) and is labeled with High severity. ...

CVE-2026-13811

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-13811 jsnjfz WebStack-Guns PageFactory.java sql injection

A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing a manipulation of the argument sort can lead to sql injection. It is possible to launch the atta...

CVE-2020-13811

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file...

CVE-2024-13811

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...

CVE-2024-13811

creationtimestamp| type| source ---|---|--- 2025-03-05 09:36:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6526 2025-03-05 12:45:55+00:00| seen| https://t.me/cvedetector/19615...

CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...

CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...

CVE-2020-13811

CVE-2020-13811 affects Foxit Studio Photo prior to version 3.6.6.922. The issue is an out-of-bounds write triggered by a crafted TIFF file, indicating a memory boundary validation problem in TIFF handling. Documented impact includes potential control of affected memory regions; no public exploit ...

CVE-2018-13811

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal All Versions V15.1. Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the...

CVE-2018-13811

CVE-2018-13811 affects Siemens SIMATIC STEP 7 (TIA Portal) before 15.1. The issue is unprotected storage of credentials: password hashes with insufficient computational effort can let an attacker with local access to a project file reconstruct passwords. Exploitation requires local access; no use...

CVE-2017-13811

creationtimestamp| type| source ---|---|--- 2017-11-23 16:14:06+00:00| published-proof-of-concept| https://t.me/dataleak/13...

CVE-2017-13811

CVE-2017-13811 affects macOS before 10.13.1, involving the fsck_msdos component. The issue is a memory corruption vulnerability that could allow an attacker to execute arbitrary code with system privileges or cause a denial of service via a crafted app. Apple addresses this by releasing macOS Hig...