CVE-2026-121228: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside…

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 157.0.8103.38 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in Paint, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 157.0.8103.38 contain a resource management error vulnerability. This vulnerability stems from WTF’s post-release reuse, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

HPESBNW05173 rev.1 - Multiple Vulnerabilities in HPE Networking Virtual Intranet Access (VIA)

Potential Security Impact: Local: Access Restriction Bypass, Code Execution, Denial of Service DoS, Disclosure of Information, Disclosure of Sensitive Information, Elevated Privileges, Elevation of Privilege, Authentication Restriction Bypass; Remote: Denial of Service DoS, Authentication...

PT-2026-136474

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

PT-2026-136466

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A race condition in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race...

PT-2026-136514

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Improper state validation in the GPU component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by usi...

Joomla Content Editor 2.9.99.4 Remote Code Execution

Joomla Content Editor versions prior to 2.9.99.5 contain an improper access control vulnerability in profile import that allows unauthenticated remote code execution. This proof of concept imports a permissive profile and uploads a PHP payload. https://packetstorm.news/download/239220...

Greenshot 1.2.10 .greenshot File Deserialization Code Execution

Greenshot version 1.2.10 contains an insecure BinaryFormatter deserialization issue in .greenshot capture files that can lead to arbitrary code execution when a crafted file is opened. This proof of concept generates crafted .greenshot files with a patched Process.Start payload...

PT-2026-136534

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the SVG component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

PT-2026-136592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in PerformanceAPIs, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...

PT-2026-136547

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

PT-2026-136588

Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-136603

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

CVE-2026-120833: NIST labbench: labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that…

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read and readrelational that passes any file with a .p or .pickle extension to pandas.readpickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute...

PT-2026-136543

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the WebAudio component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-136535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in Controls, where a remote attacker can execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

CVE-2026-121214: Google Chrome: Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute…

Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136454

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the CSS component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after...

PT-2026-136448

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Incorrect authorization in DevTools allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs when a user is tricked via social engineering into...