MAL-2026-18347 Malicious code in ccsec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f284df44a219ce4fd2270d584efc75b4c82324ac0c548deadb4ee87bcc0b4082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ccsec-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58feb382216c38ca1e861a22fd899380146a53e583fd6493fd580a58d852f0e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18351 Malicious code in csec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ca44b227ea4da53f945de70efac936762435c8450545c64bc0272d97299e69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18349 Malicious code in ccsseecc-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280860ea7ef7f4773c7f25228e7a5cf325dbf677835a0aaa5cfcc162a6c67d1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ccsec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f284df44a219ce4fd2270d584efc75b4c82324ac0c548deadb4ee87bcc0b4082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Animation component. A remote attacker could exploit this by providing a crafted HTML page to potentially achieve arbitrary code execution inside the sandbox. No specific exploit details or direct mitigat...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue caused by improper input validation in SVG . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. The vulnerability impacts confide...

CVE-2026-118312

Google Chrome contains a memory corruption vulnerability in the Paint component affecting versions prior to 156.0.8078.73 . A remote attacker could leverage this flaw by navigating a victim to a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerabili...

CVE-2026-118356

A Use after free vulnerability exists in the WTF component of Google Chrome prior to version 156.0.8078.73 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page to the victim. The vulnerability has been observed in the wild according to e...

CVE-2026-118309

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a security flaw caused by improper input validation in the UI. A remote attacker can exploit this by delivering a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox . This issue has a High...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118341

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...