7347 matches found
CVE-2026-17707
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-17707
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-17683
An inappropriate implementation in ANGLE within Google Chrome prior to version 151.0.7922.72 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability impacts Chromium -based browsers, including Microsoft Edge . Remediatio...
CVE-2026-17951: Heap-based Buffer Overflow
Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...
PT-2026-66314
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out of bounds read exists in Dawn, which allows a remote attacker to perform an out of bounds memory read by using a crafted HTML page. An out of bounds read occurs when the software...
PT-2026-66320
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in WebGL allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update...
PT-2026-66119
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the MediaRecording component allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page...
PT-2026-66091
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out of bounds read exists in WebGL, which allows a remote attacker to perform an out of bounds memory read by inducing the user to visit a crafted HTML page. An out of bounds read...
PT-2026-66033
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An uninitialized use in ANGLE allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update Google Chrome...
PT-2026-66233
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Side-channel information leakage in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Side-channel leakage occu...
The vulnerability of the USB Audio Class driver for Windows operating systems allows attackers to disclose protected information.
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
PT-2026-66188
Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-17946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-17995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
NewStart CGSL MAIN 6.06 : krb5 Multiple Vulnerabilities (NS-SA-2026-0063)
The remote NewStart CGSL host, running version MAIN 6.06, has krb5 packages installed that are affected by multiple vulnerabilities: - In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid leng...
SUSE CVE-2026-64833
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a coresize value larger than the actual packet length. Attackers can exploit the missing bound...
httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
PT-2026-65657
Summary Using Databasecreate aggregate, create aggregate handler, or Databasedefine aggregator to define an aggregate function, and then using an open statement calling that function after the database has been explicitly closed will result in an invalid memory read and a segmentation fault...
An authenticated user could possibly crash a KDC process
== Summary: A kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory. This memory is not exposed to the user, but in some circumstances the server could crash. Description A miscalculation means an ASN.1 structure used in a Kerberos password...
