firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget

A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...

Important: Red Hat Security Advisory: libXi security update

An update for libXi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow

A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...

libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...

Important: Red Hat Security Advisory: libXi security update

An update for libXi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow

A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...

libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...

libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...

Important: Red Hat Security Advisory: libXi security update

An update for libXi is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow

A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...

Primetek Primefaces 5.x - Remote Code Execution

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution. id: CVE-2017-1000486 info: name: Primetek Primefaces 5.x - Remote Code Execution author: Moritz Nentwig severity: critical description: Primetek Primefaces 5.x is vulnerable to a weak encryption fl...

EUVD-2026-115004

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile. Attackers can create a file record via file.createFile with a traversal name, then trigger document parsin...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a component of Google Chrome on Windows. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox, potentiall...

chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page

A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page

A flaw was found in ANGLE. A type confusion vulnerability in ANGLE, a graphics abstraction layer used in Google Chrome, allows a remote attacker to exploit the flaw. By crafting a malicious HTML page, the attacker can trigger this vulnerability. This could potentially lead to the execution of...