4255 matches found
EUVD-2026-65781
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
CVE-2026-79183
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
CVE-2026-79183
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
CVE-2026-79183
A Use after free vulnerability in the Accessibility component of Google Chrome (and other Chromium-based browsers like Microsoft Edge ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack requires social engineering and UI Interaction . This issue affects versions p...
CVE-2026-79175
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79175
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65764
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79175
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79175
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
The vulnerability in the vdpa_nl_policy structure of the drivers/vdpa/vdpa.c module of the vDPA device driver for the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vdpanlpolicy structure in the drivers/vdpa/vdpa.c file of the vDPA device driver for the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the xt_ct_tgDestroy() function in the net/netfilter/xt_CT.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xtcttgDestroy function in the net/netfilter/xtCT.c module of the netfilter component of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the x509_process_extension() function in the crypto/asymmetric_keys/x509_cert_parser.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the x509processextension function in the crypto/asymmetrickeys/x509certparser.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the bpf_nf_link_update() function in the net/netfilter/nf_bpf_link.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfnflinkupdate function in the net/netfilter/nfbpflink.c module of the netfilter component of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-79183: Use After Free
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
ROS-20260825-73-0022
The vulnerability of the skbcopyubufs function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the issue of data being written outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
PT-2026-81735
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in the Accessibility component. A remote attacker who has already compromised the renderer process can execute arbitrary code outside the sandbox by induci...
PT-2026-81743
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the Accessibility component. This flaw allows a remote attacker to execute arbitrary code outside the sandbox through UI interaction, typically leverage...
ToxicPanda 2.0 can take over your Android phone and banking apps
Researchers have uncovered ToxicPanda 2.0, an Android banking Trojan and remote-access tool designed for account takeover and “on-device fraud.” Not only does ToxicPanda 2.0 have a much larger target list of banks and e-wallets, it has also expanded its capabilities by combining banking overlays,...
The vulnerability of the sm_name() function in the src/GitPython/git/objects/submodule/util.py file of the Python library for interacting with Git repositories in GitPython, which allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the smname function in the src/GitPython/git/objects/submodule/util.py file of the Python library for interacting with Git repositories in GitPython is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious...