CVE-2026-110161

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-110161

Google Chrome is affected by a Use after free vulnerability in its Network component, as identified in CVE-2026-110161. This flaw exists in versions prior to 155.0.8059.79 and allows a remote attacker to execute arbitrary code outside the sandbox using crafted network traffic. The vulnerability i...

CVE-2026-110165

Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110136

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

CVE-2026-100128 Bridge | Out-of-bounds Write (CWE-787)

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-100128

Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction , specifically the opening of a malicious file. While Adobe is not aware of any exploits in the wil...

CVE-2026-100129 Bridge | Out-of-bounds Write (CWE-787)

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-100129

Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically for a victim to open a malicious file. Adobe has released a pr...

CVE-2026-100127

Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787 ) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically when a victim opens a malicious file. Adobe has released a pr...

CVE-2026-100127 Bridge | Out-of-bounds Write (CWE-787)

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83966

Adobe Substance 3D Sampler is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious ...

CVE-2026-83966 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83965

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow for arbitrary code execution within the context of the current user. Exploitation of this issue requires user interaction , specifically when a victim opens a malicious file. Adobe ha...

CVE-2026-96521

Photoshop Desktop is affected by an out-of-bounds write vulnerability (CWE-787 ). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user. Successful exploitation requires user interaction , specifically by tricking a victim into opening a maliciou...

CVE-2026-96522

Photoshop Desktop is affected by an out-of-bounds write vulnerability (CWE-787) which could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically requiring a victim to open a malicious file. No specific...

CVE-2026-96521 Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-96522 Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83661 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...