29126 matches found
CVE-2026-76022
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-63599
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76021
A use after free vulnerability exists in the DOM component of Google Chrome (prior to version 151.0.7922.173), allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability also affects Microsoft Edge (Chromium-based). Remediation includes upd...
CVE-2026-76022
A buffer overflow vulnerability in the Network component of Google Chrome (prior to version 151.0.7922.173) allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability also affects Microsoft Edge (Chromium-based) and Chromium on various distr...
CVE-2026-76023
Google Chrome versions prior to 151.0.7922.173 are vulnerable to improper resource control within the Linux Toolkit Theming component. This flaw allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by serving a crafted HTML page. ...
CVE-2026-76017
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...
CVE-2026-76018
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-76018
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...
EUVD-2026-63595
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...
EUVD-2026-63594
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...
CVE-2026-76018
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-76017
A Use after free vulnerability exists in Chromoting within Google Chrome and Microsoft Edge (Chromium-based) prior to version 151.0.7922.173 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. The vulnerability has a Critical secu...
CVE-2026-76018
A privilege elevation vulnerability exists in the Import component of Google Chrome and Microsoft Edge (Chromium-based) prior to version 151.0.7922.173 . A remote attacker leveraging social engineering can use a crafted file to potentially execute arbitrary code outside the sandbox. Impact includ...
GHSA-8CFW-PCWH-V63W Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
Impact Affected versions of Winter CMS allow authenticated backend users with CMS template-editing permissions to escape the Twig sandbox "safe mode" that is meant to restrict what template code can do. Using any of the following permissions, an attacker can read and modify arbitrary database...
Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
Impact Affected versions of Winter CMS allow authenticated backend users with CMS template-editing permissions to escape the Twig sandbox "safe mode" that is meant to restrict what template code can do. Using any of the following permissions, an attacker can read and modify arbitrary database...
GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
CVE-2026-53584
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...
EUVD-2026-63546
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...
CVE-2026-53584 libgit2: Submodule path traversal
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...