CVE-2026-2050

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...

PT-2026-52248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dw mmc-rockchip driver where older controllers rk2928, rk3066, rk3188 lack driver private data because they do not support UHS speeds and do not handle phase data....

CVE-2026-2050 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

Improper Verification of Cryptographic Signature at netty-handler dependency in Bamboo Data Center

This High severity Improper Verification of Cryptographic Signature vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Verification of Cryptographic Signature vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-13037

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13026

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2026-39048

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

A use after free vulnerability exists in the Blink component of the Google Chrome web browser (prior to version 149.0.7827.197 ). The flaw arises because the component fails to properly handle object lifecycle issues , leading to memory error references. A remote attacker can exploit this by navi...

CVE-2026-13036

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13034

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-13030

Google Chrome on Android is vulnerable to an Uninitialized Use in GPU (CVE-2026-13030) in versions prior to 149.0.7827.197 . A remote attacker could exploit this by hosting a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability is categorized with H...

EUVD-2026-39040

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-39041

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-13027

A use after free vulnerability exists in the FileSystem component of Google Chrome and Microsoft Edge browsers. This memory error allows a remote attacker to potentially exploit heap corruption by navigating to a specially crafted HTML page. The vulnerability affects versions prior to 149.0.7827....

CVE-2026-13025

A race condition in the DevTools component of Google Chrome and Microsoft Edge allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is caused by insufficient validation of input data . Affected...

CVE-2026-13024

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-13022

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13022

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using “after free” in Dawn in Google Chrome before version 146.0.7680.178 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: High...