CVE-2026-87442

Google Chrome versions prior to 153.0.8010.36 are vulnerable to a confused deputy flaw in the Prerender component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially bypass the web origin policy . Microsoft Edge (Chromium-based) is also a...

CVE-2026-87553

Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87456

Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87456

Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87453

Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87499

Google Chrome versions prior to 153.0.8010.36 are affected by CVE-2026-87499 , which involves incorrect authorization in Network . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . This vulnerability is noted as having High s...

CVE-2026-87524

A use after free vulnerability in the Core component of Google Chrome on Windows (prior to version 153.0.8010.36 ) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability has been addressed in vari...

Linux kernel is_supervision_frame() Data Compromise

The vulnerability of the issupervisionframe function in the net/hsr/hsrforward.c module, which is part of the networking functions of the Linux operating system’s kernel, relates to the issue of data being written outside of the buffer in memory. Exploiting this vulnerability could allow a...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the drmgpusvmscanmm function in the drivers/gpu/drm/drmgpusvm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system relates to the unlocking of unlocked resources. Exploiting this vulnerability could allow an attacker to compromise the...

Direct Rendering IOMMU Use-After-Free

The vulnerability of the msmiommumap function in the drivers/gpu/drm/msm/msmiommu.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker...

amdgpu_gart_table_ram_free Heap Buffer Overflow DoS

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

Linux tlbFlush() Heap Buffer Overflow DoS

The vulnerability of the tlbFlush function in the arch/arm64/include/asm/tlb.h header of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

batadv_tt_prepare_tvlv_local_data Heap Buffer Overflow DoS

The vulnerability of the batadvttpreparetvlvlocaldata function in the net/batman-adv/translation-table.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an...

Linux kernel acceleration device driver Heap Buffer Overflow DoS

The vulnerability of the qaicgemobjectmmap function in the drivers/accel/qaic/qaicdata.c file of the Linux kernel’s acceleration device driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the opmap2430probe function in the drivers/usb/musb/omap2430.c driver for Linux USB device drivers is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Linux drivers auxdisplay line-display buffer overflow DoS

The vulnerability of the linedispdisplay function in the drivers/auxdisplay/line-display.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

BPF Interpreter Heap Buffer Overflow DoS

The vulnerability of the BTFID function in the kernel/bpf/bpflsm.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to compromise the...

adm1266 gpio_get_multiple() function Heap Buffer Overflow

The vulnerability of the adm1266 gpiogetmultiple function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...