1249147 matches found
CVE-2026-17892
Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50641
Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17892
Affected product: Google Chrome WebXR implementation. Vulnerable component/file: WebXR in Chrome. Root cause: Inappropriate WebXR implementation allowing a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. Affected versions: prior to 151.0.7922...
EUVD-2026-50749
Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17790
CVE-2026-17790 : An uninitialized-use flaw in ANGLE within the Chromium-based Google Chrome on Windows allows a crafted HTML page to recover potentially sensitive information from process memory. Affected: ANGLE component of Chrome before version 151.0.7922.72. Upstream reference notes Chromium i...
CVE-2026-17790
Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17759
Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50840
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-17714
CVE-2026-17714 affects the ANGLE component in Google Chrome. An uninitialized use flaw allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. Upstream details reference Chromium issue 521293438; Red Hat/Debian notes confirm the ANGLE root c...
EUVD-2026-50833
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-51290
...
PT-2026-66555
IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...
RockyLinux 10 : firefox (RLSA-2026:47101)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47101 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...
Linux Distros Unpatched Vulnerability : CVE-2026-17975
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from...
IBM Langflow OSS configuration error vulnerability
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications through drag-and-drop components. Additionally, it supports deep customization using Python to integrate...
Devolutions Server 2026.1.x < 2026.1.24.0 / 2026.2.x < 2026.2.14.0 Multiple Vulnerabilities (DEVO-2026-0026)
The version of Devolutions Server installed on the remote host is prior or equal to 2026.1.23.0 or 2026.2.4.0 through 2026.2.12.0. It is, therefore, affected by multiple vulnerabilities, including: - Improper access control in the role membership management endpoint in Devolutions Server allows a...
PT-2026-66265
Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
PT-2026-66294
Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...