22628 matches found
CVE-2026-78943
A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...
CVE-2026-79121
A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...
CVE-2026-12717
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
CVE-2026-77552
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...
CVE-2026-77554
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
CVE-2026-77547
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77554
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
CVE-2026-77554
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
CVE-2026-77552
UniFi Enterprise Audio/Video Bridge (by Ubiquiti) is affected by an Improper Input Validation vulnerability that allows a network-accessible malicious actor to execute a Command Injection on the device. The flaw requires no authentication or user interaction, yielding a CVSS 3.1 score of 9.8 (CRI...
CVE-2026-77552
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...
CVE-2026-77548
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77547
CVE-2026-77547 affects the UniFi Access Application (CNA: Ubiquiti). An Improper Input Validation flaw allows a network-based attacker with low privileges to achieve Command Injection on the host device, rated CVSS 9.9 (Critical) with changed scope and high impact across confidentiality, integrit...
CVE-2026-77546
UniFi Access Application is affected by an Improper Input Validation flaw that allows a low-privileged actor with network access to execute Command Injection on the host device. The CNA-assigned CVSS v3.1 score is 9.9 (CRITICAL) with a changed scope and high impact across confidentiality, integri...
CVE-2026-77546
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77543
An Improper Input Validation vulnerability in the UniFi Access Application (Ubiquiti) allows a network-adjacent actor with low privileges to achieve command injection on the host device, rated CVSS 9.9 (Critical) with changed scope. The attack requires no user interaction and has low complexity. ...
CVE-2026-77543
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77542
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...