CVE-2026-110171

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110154

Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110138

Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110169

Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110169

Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110168

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a use after free flaw in the V8 component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page . This flaw has been addressed in the 155.0.8059.79 update for Wind...

CVE-2026-110166

Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110145

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110156

Google Chrome on Mac versions prior to 155.0.8059.79 is vulnerable to an incorrect reference resolution flaw in the Extensions component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox using a crafte...

CVE-2026-110162

Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110165

Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110148

Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110161

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-110161

Google Chrome is affected by a Use after free vulnerability in its Network component, as identified in CVE-2026-110161. This flaw exists in versions prior to 155.0.8059.79 and allows a remote attacker to execute arbitrary code outside the sandbox using crafted network traffic. The vulnerability i...

CVE-2026-110136

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...