CVE-2026-13935

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`

electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...

CVE-2026-11367

creationtimestamp| type| source ---|---|--- 2026-06-30 19:17:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjppwjmog2l...

CVE-2026-10654

creationtimestamp| type| source ---|---|--- 2026-06-30 18:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p...

CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

UBUNTU-CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012

CVE-2026-58012 affects GLib. A buffer over-read can occur in g_regex_replace when used with the G_REGEX_RAW flag and case-change replacement escapes because string_append processes matched substrings with UTF-8 functions that expect valid UTF-8 input, even when treated as raw bytes. Impact: minor...

CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

EUVD-2026-40314

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-57637

creationtimestamp| type| source ---|---|--- 2026-06-30 12:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiyatzvyv2j...

CVE-2025-7406

creationtimestamp| type| source ---|---|--- 2026-06-30 09:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqhavdv224...

CVE-2026-8664

creationtimestamp| type| source ---|---|--- 2026-06-29 21:40:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhbqrf6b2d...

CVE-2026-57945

creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5osmcfv2g 2026-06-29 18:49:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ozv2oa2d 2026-06-29 21:14:48+00:00| seen|...

CVE-2026-57328

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguuxldxi2t...

CVE-2026-12856

creationtimestamp| type| source ---|---|--- 2026-06-29 15:43:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgtcm3hev2p 2026-06-29 15:54:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtxj5udt2d 2026-06-29 17:48:57+00:00| seen|...

CVE-2026-13165

creationtimestamp| type| source ---|---|--- 2026-06-29 15:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrwxop7n2x 2026-06-29 15:47:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtjzm7572o 2026-06-29 21:13:46+00:00| seen|...

gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf...

Mocodo vulnerable to SQL injection in `/web/generate.php`

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution RCE under certain conditions...