CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

CVE-2026-114197

Mandiant FLARE capa releases prior to version 10.0.0 are vulnerable to arbitrary code execution due to the deserialization of untrusted data . This vulnerability occurs when the capa utility processes a specially crafted .viv or .exe.viv workspace. The CVSS v4.0 score for this issue is 8.7 (HIGH)...

CVE-2026-114197 Deserialization of untrusted data in capa

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

EUVD-2026-106923

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

EUVD-2026-106862

IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type...

EUVD-2026-106870

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system...

EUVD-2026-105511

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113108

A flaw was found in chromium-browser's Script component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption through a use-after-free condition where released memory is improperly accessed. Successful...

CVE-2026-113097

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox by convincing a user to visit a crafted HTML page. The issue stems from a use-after-free error in the FileSystem component, which occurs when the...

CVE-2026-113228

A flaw was found in chromium-browser. A use-after-free vulnerability in the Network component occurs when the browser accesses memory that has already been released. A remote attacker could exploit this flaw by enticing a user to open a specially crafted HTML page, potentially allowing arbitrary...

CVE-2026-113080

A flaw was found in the WebAppInstalls component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's restricted sandbox environment. By convincing a user to open a specially crafted HTML page, an attacker can trigger a use-after-free memory flaw...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

CVE-2026-113259

A flaw was found in the Frames component of Chromium. A remote attacker can exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after being released. Successful exploitation allows the attacker to...

CVE-2026-113255

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free memory error in the CustomTabs component...

CVE-2026-113227

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser sandbox due to a use-after-free issue in the Editing component, where previously released memory is improperly accessed. To exploit this vulnerability, an attacker must...

CVE-2026-113174

A flaw was found in the Extensions component of the Chromium browser. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to access memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a...

CVE-2026-113123

A flaw was found in chromium-browser. A use-after-free flaw in the GPU Graphics Processing Unit component allows memory to be improperly accessed after it has been released. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, potentially...

CVE-2026-113156

A flaw was found in Google Chrome's Messages component. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free error, where the application accesses memory that has...

CVE-2026-113112

A flaw was found in chromium-browser. A use-after-free vulnerability exists within the Extensions component. A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox environment...

CVE-2026-113085

A flaw was found in the Media component of chromium-browser. By convincing a user to open a specially crafted HTML page, a remote attacker can trigger a use-after-free memory flaw, where the browser accesses memory after it has been released. Successful exploitation allows the attacker to execute...