PT-2026-53223

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description A stack-based buffer overflow occurs when manipulating the pppUserName argument within the formPPPoESetup function of the /goform/formPPPoESetup endpoint in the POST Request Handler component. This...

testimonial-widgets-sqli-cve

CVE-2026-XXXXX Admin SQL Injection in Testimonial Widget...

SUSE CVE-2026-13281

Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5815169645871104 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x746f7b6b385f Crash State: imagesimpleexpand...

CVE-2026-13281

Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

DEBIAN-CVE-2026-13282

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device. Chromium security severity: High...

CVE-2026-13281

Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2026-13282

A Use after free vulnerability exists in the Payments component of Google Chrome on Android (prior to version 149.0.7827.201 ). This flaw allows a local attacker with physical access to the device to potentially exploit heap corruption . Practical consequences may include arbitrary code execution...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<grk::FileFormatJP2Decompress::FileFormatJP2Decompre

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6266225987223552 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

Improper Verification of Cryptographic Signature at netty-handler dependency in Bamboo Data Center

This High severity Improper Verification of Cryptographic Signature vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Verification of Cryptographic Signature vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-13026

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

A use after free vulnerability exists in the Blink component of the Google Chrome web browser (prior to version 149.0.7827.197 ). The flaw arises because the component fails to properly handle object lifecycle issues , leading to memory error references. A remote attacker can exploit this by navi...

EUVD-2026-39048

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13034

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-13030

Google Chrome on Android is vulnerable to an Uninitialized Use in GPU (CVE-2026-13030) in versions prior to 149.0.7827.197 . A remote attacker could exploit this by hosting a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability is categorized with H...

CVE-2026-13025

A race condition in the DevTools component of Google Chrome and Microsoft Edge allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is caused by insufficient validation of input data . Affected...

CVE-2026-13027

A use after free vulnerability exists in the FileSystem component of Google Chrome and Microsoft Edge browsers. This memory error allows a remote attacker to potentially exploit heap corruption by navigating to a specially crafted HTML page. The vulnerability affects versions prior to 149.0.7827....

EUVD-2026-39040

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...