EUVD-2026-91132

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

PT-2026-104395

Name of the Vulnerable Software and Affected Versions prosemirror-view versions prior to 1.42.3 Description The view component, which manages the editable browser interface for documents, contains a flaw in its paste handling. It accepts attacker-provided HTML where the clipboard slice context...

CVE-2026-104847: Improper Neutralization of Input During Web Page Generation

ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed through schema attribute validation. Whe...

PT-2026-105490

Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...

CVE-2026-102514

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-102514

PeaZip 11.2.0 and earlier versions are vulnerable to an Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component. The vulnerability occurs during PCOMPRESS1 stream decompression, where the 32-bit compsize field of the first bl...

EUVD-2026-91054

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

EUVD-2026-91031

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-95341

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523719002...

CVE-2026-95326

An incomplete cleanup flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533041383...

CVE-2026-95370

An inappropriate implementation flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517417437...

CVE-2026-95318

A buffer overflow flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576976...

homeassistant-stubs (2023.12.0b2), pytest-homeassistant-custom-component (0.13.80) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.12.0b2)

homeassistant PYPI version 2023.12.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.0b2 - pytest-homeassistant-custom-component 0.13.80 Source cves: CVE-2025-62172, CVE-2026-91130 Sour...

homeassistant-stubs (2021.4.0b4), pytest-homeassistant-custom-component (0.3.0) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.4.0b4)

homeassistant PYPI version 2021.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b4 - pytest-homeassistant-custom-component 0.3.0 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2021.9.0b2), pytest-homeassistant-custom-component (0.4.4) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.9.0b2)

homeassistant PYPI version 2021.9.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.9.0b2 - pytest-homeassistant-custom-component 0.4.4 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2021.11.3), pytest-homeassistant-custom-component (0.4.10) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.11.3)

homeassistant PYPI version 2021.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.3 - pytest-homeassistant-custom-component 0.4.10 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2021.11.4), pytest-homeassistant-custom-component (0.4.11) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.11.4)

homeassistant PYPI version 2021.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.4 - pytest-homeassistant-custom-component 0.4.11 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2021.12.0b3), pytest-homeassistant-custom-component (0.5.1) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.12.0b3)

homeassistant PYPI version 2021.12.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0b3 - pytest-homeassistant-custom-component 0.5.1 Source cves: CVE-2025-62172, CVE-2026-91130 Source...