CVE-2026-118309

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-118319

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue within the Skia library. A remote attacker could exploit this vulnerability by leveraging a crafted HTML page to potentially read memory inside the sandbox. For Debian systems (trixie), the issue is fixed in...

CVE-2026-118314

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a high-severity security issue due to improper input validation in the UI. A remote attacker can leverage this flaw by providing a crafted HTML page to potentially execute arbitrary code within the sandbox. To mitigate this...

CVE-2026-118314

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: High...

CVE-2026-118314

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: High...

CVE-2026-118335

Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-118335

Google Chrome on Mac versions prior to 156.0.8078.73 is vulnerable to a High severity issue due to improper input validation in Metrics . A remote attacker can exploit this by serving a crafted HTML page to potentially execute arbitrary code inside the sandbox. Remediation is available by updatin...

CVE-2026-118310

Google Chrome on Windows versions prior to 156.0.8078.73 is vulnerable to a security flaw due to improper input validation in Views . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . This vulnerability is classified as h...

CVE-2026-118335

Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-118343

Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118343

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a High severity security issue (CVE-2026-118343) caused by improper input validation in the ReadingList component. A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the san...

CVE-2026-118328

Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118337

Use after free in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118352

Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118321

Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118317

Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118318

Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118318

Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-59158

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, "src/module.ts" unconditionally merges all module options, including a configured cloud "apikey", into "runtimeConfig.public.ollama". Nuxt serializes this public configuration into the...

AZL-111805 CVE-2026-97045 affecting package application-gateway-kubernetes-ingress 1.7.7-7

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...