CVE-2026-29001 TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized by getValueAttribute when the setting ...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JPEG COM marker encoding path in JpegEncode.c, when a JPEG image carrying an oversized comment in its im.info metadata is re-encoded. The comment length is not validated before being written as a COM marker,...

CVE-2026-114135

A flaw was found in jupyter-server. When configured with a gateway connection, the server validates user authentication but fails to verify whether the user has permission to run actions on computational kernels. A remote authenticated user with restricted privileges can exploit this flaw to open...

CVE-2026-113342

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption issue in the Network component by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to bypass the security sandbox an isolated execution environment and execute...

CVE-2026-113330

A flaw was found in the CustomTabs component of Chromium on Android. A remote attacker could exploit a memory corruption issue by convincing a user to open a specially crafted HTML page. This flaw allows the attacker to execute arbitrary code within the browser's isolated security environment...

CVE-2026-113320

A flaw was found in Google Chrome's Navigation component on iOS. A remote attacker can exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113318

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the ServiceWorker component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environmen...

CVE-2026-113313

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbox...

CVE-2026-113307

A flaw was found in the Extensions component of Chromium. A remote attacker can exploit this memory corruption vulnerability by tricking a user into opening a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted sandbox...

CVE-2026-113299

A flaw was found in the WebProtect component of Chromium. A remote attacker could trigger memory corruption by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code inside the browser's sandbox environment...

CVE-2026-113292

A flaw was found in Google Chrome's Omnibox component. A remote attacker could achieve arbitrary code execution within the browser's sandbox an isolated security environment by convincing a user to visit a specially crafted HTML page. This vulnerability stems from improper input validation when...

CVE-2026-113283

A flaw was found in the Google Chrome CredentialProvider component. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code outside the restricted browser...

CVE-2026-113301

A flaw was found in the WebAppInstalls component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. This issue could allow the attacker to execute arbitrary code within the browser's...

CVE-2026-113280

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a memory corruption condition within the Paint rendering component...

CVE-2026-113265

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Back/Forward Cache BFCache, a browser feature that accelerates page navigation. A remote attacker could exploit this flaw by convincing a user to open a crafted HTML page, potentially allowing arbitrary code...

CVE-2026-113269

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the BrowserTag component by enticing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113272

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption to execute untrusted...

CVE-2026-113279

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment. By enticing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption in the browser's...

CVE-2026-113257

A flaw was found in the Media component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by convincing a user to visit a crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the application's sandbox environment...

CVE-2026-113258

A flaw was found in the Chromoting remote desktop component of chromium-browser. A remote attacker could exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated...