CVE-2026-76034

CVE-2026-76034 is a critical buffer overflow in the WebGL component of Google Chrome prior to 151.0.7922.169 . A remote attacker can exploit this flaw via a crafted HTML page to execute arbitrary code outside the browser sandbox , enabling direct code execution on the underlying operating system....

CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76036

Affected: Dawn, the open-source WebGPU implementation library bundled in Chrome on Android, versions prior to 151.0.7922.169. Cause: A buffer overflow in Dawn allows writing beyond memory boundaries. Impact: A remote attacker can execute arbitrary code outside the Chrome sandbox by luring a victi...

EUVD-2026-61223

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-54876 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-75936

Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression. To remediate this issue,...

CVE-2026-75877

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN00432574/FUN0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer...

CVE-2026-71676

Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...

CVE-2026-12520

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

GHSA-RCR2-HGGW-43WM surfio has an out-of-bounds read

Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service. Patches The bug has been patched in version 0.0.19...

surfio has an out-of-bounds read

Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service. Patches The bug has been patched in version 0.0.19...

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice. Patches The bug has been patched starting with version 6.2.9...

GHSA-PR85-W493-9W3X resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice. Patches The bug has been patched starting with version 6.2.9...

ROOT-APP-NPM-CVE-2026-33151 CVE-2026-33151 in socket.io-parser - Patched by Root

Root has patched CVE-2026-33151 in the socket.io-parser package for Root:npm. Multiple fixed versions available...

CVE-2026-75877

TRENDnet TV-IP751WIC firmware 11.03.03 is vulnerable in the alphapd component across multiple functions (SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, FUN_0043372C), allowing remote stack-based buffer overflow. CVSS 3.1 scores 9.9 (CR...

EUVD-2026-61203

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN00432574/FUN0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer...

EUVD-2026-61175

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

CVE-2026-12520

In Zephyr RTOS v4.4.0 and earlier, the HL7800 modem driver's ~20 AT-response handlers write into a 128-byte stack buffer. The +KCELLMEAS handler passes the unbounded wire length as destination size, causing a full stack overflow; other handlers suffer single-byte off-by-one NUL writes. The fix us...

CVE-2026-12520 Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...