CVE-2026-110161

Google Chrome is affected by a Use after free vulnerability in its Network component, as identified in CVE-2026-110161. This flaw exists in versions prior to 155.0.8059.79 and allows a remote attacker to execute arbitrary code outside the sandbox using crafted network traffic. The vulnerability i...

CVE-2026-110165

Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110148

Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110161

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-110136

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process. An attacker can execute arbitrary code by providing specially crafted input to the application. Details Serialization is a process of converting an object into a sequence...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process. An attacker can execute arbitrary code by providing specially crafted input to the application. Details Serialization is a process of converting an object into a sequence...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process. An attacker can execute arbitrary code by providing specially crafted input to the application. Details Serialization is a process of converting an object into a sequence...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the UI Automation process. An attacker can execute arbitrary code by enticing a user to interact with a specially crafted XPS document containing synthetic hyperlinks that bypass navigation...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the UI Automation process. An attacker can execute arbitrary code by enticing a user to interact with a specially crafted XPS document containing synthetic hyperlinks that bypass navigation...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the UI Automation process. An attacker can execute arbitrary code by enticing a user to interact with a specially crafted XPS document containing synthetic hyperlinks that bypass navigation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process. An attacker can execute arbitrary code by providing specially crafted input to the application. Details Serialization is a process of converting an object into a sequence...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process. An attacker can execute arbitrary code by providing specially crafted input to the application. Details Serialization is a process of converting an object into a sequence...