CVE-2026-19168

A flaw was found in V8 in Google Chrome. An inappropriate implementation allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to unauthorized code execution...

CVE-2026-60122

A flaw was found in gpsd. This code injection vulnerability in the gpsprof utility allows an attacker to execute arbitrary operating system OS commands. By controlling GPS input data, an attacker can inject malicious content into the SKY.satellites.used field. This unsanitized input is then...

CVE-2026-19174

A flaw was found in V8, the JavaScript engine used in Google Chrome. This integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox—a protective environment that limits what a program can do. This can occur when a user visits a special...

CVE-2026-19162

A flaw was found in V8, the JavaScript engine used in Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox environment. Exploitation occurs when a user visits a specially crafted HTML page. This could lead to...

CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

CVE-2026-19546

CVE-2026-19546 : In DBI, this entry describes a flaw that is a partial fix for CVE-2026-14380, affecting Red Hat Enterprise Linux releases 9.8.z and 10.2.z. The vulnerability enables arbitrary code execution via a caller-influenced profile attribute. The connected documents provide the same descr...

CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

CVE-2026-19150

A flaw was found in V8, the JavaScript engine used in Google Chrome. An inappropriate implementation vulnerability allowed a remote attacker to execute arbitrary code within the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML page. The primary impact...

CVE-2026-19159

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component allows a remote attacker to potentially exploit heap corruption. By convincing a user to engage in specific user interface gestures and visit a crafted HTML page, an attacker could achieve arbitrary cod...

CVE-2026-19144

A flaw was found in Google Chrome. This vulnerability, known as a use-after-free, occurs when the program attempts to use memory that has already been deallocated. A remote attacker could exploit this by tricking a user into visiting a specially crafted HTML page. Successful exploitation could le...

CVE-2026-19152

A flaw was found in Chromium. Insufficient policy enforcement within the Navigation component allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape. This vulnerability can be exploited via a specially crafted HTML page, leading to a bypass of...

CVE-2026-19145

A flaw was found in the Translate component of Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected syst...

CVE-2026-19142

A flaw was found in Google Chrome. A remote attacker could exploit a use-after-free vulnerability in the Views component by convincing a user to interact with specific user interface elements through a specially crafted HTML page. This could lead to heap corruption, potentially allowing the...

CVE-2026-19138

A flaw was found in Google Chrome's CrashReporting component. A heap buffer overflow vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially escape the browser's security sandbox by crafting a malicious HTML page. This could lead to further...

CVE-2026-73067

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...