CVE-2026-8577 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-8577 Integer overflow in Fonts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-8577

Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-8577

Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-8577

creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260515 2026-05-14 21:33:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltrfp5un52t 2026-05-17 18:00:00+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-8577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

MINI-GV33-8577-4XHR

Bulletin has no description...

CGA-6RPX-7J9W-8577

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2025-8577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific ...

Microsoft Edge (Chromium) < 139.0.3405.86 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 7, 2025 advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to...

CVE-2025-8577

A flaw was found in the Picture-in-Picture component of Google Chrome. This vulnerability allows a remote attacker who convinces a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

creationtimestamp| type| source ---|---|--- 2025-08-07 01:55:52+00:00| seen| Telegram/TWOvwNyq9WZgJrK7NFWoWzTEKyXKbyW9tlBgZnDKP8BVf0...

Google Chrome < 139.0.7258.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 139.0.7258.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remot...

Google Chrome < 139.0.7258.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 139.0.7258.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a...

CVE-2019-8577

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges...

Linux Distros Unpatched Vulnerability : CVE-2016-8577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the v9fsread function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory...

CVE-2024-8577

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861B20230220/4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. T...