55354 matches found
CVE-2026-11140
CVE-2026-11140 corresponds to an out-of-bounds read in Chromecast within Google Chrome before version 149.0.7827.53. The issue is triggered when a renderer process is compromised and processes a crafted HTML page, allowing a remote attacker to read potentially sensitive information from the proce...
CVE-2026-11114
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11114
CVE-2026-11114 : A use-after-free in Chrome’s Device Trust feature on macOS allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome on Mac, prior to version 149.0.7827.53 . Root cause and i...
CVE-2026-11114
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11114
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-6858
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN...
CVE-2024-6858
In Arista EOS, CVE-2024-6858 affects multiple EOS releases (EOS 4.31.x, 4.30.x, 4.29.x, 4.28.x) where 802.1X is enabled and a fallback VLAN with an EAPOL-capable device can allow multi-auth unauthenticated hosts access to a switch port. Root cause: improper authentication handling when using dot1...
MINI-XQ85-VP7Q-6G6C
Bulletin has no description...
MINI-GW76-7R5C-3825
Bulletin has no description...
MINI-VQ65-H352-W8CV
Bulletin has no description...
MINI-89R2-VH9Q-F88G
Bulletin has no description...
MINI-M4XC-GXGQ-VHXV
Bulletin has no description...
MINI-WR84-CX2W-FG89
Bulletin has no description...
MINI-732H-2Q4H-33XC
Bulletin has no description...
MINI-M6C3-M66X-XG29
Bulletin has no description...
MINI-HPVX-G3W3-429J
Bulletin has no description...
MINI-X29G-V772-QJJ2
Bulletin has no description...
GHSA-QMC5-GV6V-8P22 OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...