27150 matches found
CVE-2026-64646 Next.js: Unbounded Server Action payload in Edge runtime
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...
CVE-2026-64646
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...
CVE-2026-64646: Allocation of Resources Without Limits or Throttling
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...
CVE-2026-57990
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57978
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-57990
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-49059
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57990
CVE-2026-57990 affects Microsoft Edge (Chromium-based). The vulnerability is described as an information disclosure where files or directories accessible to external parties allow an unauthorized attacker to disclose information over a network. The published CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R...
CVE-2026-57990 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
CVE-2026-57990 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
CVE-2026-57989 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
CVE-2026-57989 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
EUVD-2026-49058
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989
CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...
EUVD-2026-49057
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-57978 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...