CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5913

Google Chrome versions prior to 147.0.7727.55 are vulnerable to an out-of-bounds read within the Blink rendering module. A remote attacker can exploit this flaw by delivering a crafted HTML page to cause an out-of-bounds memory read or a service failure . Remediation is available in version 147.0...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

The Google Chrome browser, and specifically the chromium package, is vulnerable to an out-of-bounds memory read due to insufficient data validation in the Media component. A remote attacker can exploit this by providing a crafted video file , which may result in information disclosure or a servic...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5890

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a race condition within the WebCodecs interface. This flaw occurs due to synchronization errors when using a shared resource, which could allow a remote attacker to obtain potentially sensitive information from process memory by navi...

CVE-2026-5869

A heap buffer overflow in the WebML component of Google Chrome (prior to version 147.0.7727.55 ) allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page . The vulnerability is classified with a High security severity by Chromium. Remediatio...

CVE-2026-5869

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5864

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5864

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

PT-2026-32542

Name of the Vulnerable Software and Affected Versions jq affected versions not specified Description The strindices builtin in src/builtin.c passes arguments to jv string indexes in src/jv.c without verifying they are strings. Because jv string indexes relies on assert checks that are removed in...

CVE-2025-14858

The CVE targets Semtech LR11xx LoRa transceivers with early firmware versions. During a firmware validity check over SPI, the device decrypts an encrypted firmware package block-by-block; the last decrypted block remains uncleared in memory after validation, enabling an attacker with SPI access t...

ROS-20260407-73-0003

A vulnerability in the sja1105tabledeleteentry function of the drivers/net/dsa/sja1105/sja1105/sja1105staticconfig.c module of the NXP SJA1105 family switch driver of the Linux operating system kernel is related to memory reads outside of the allocated buffer. Exploitation of the vulnerability...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.55 contained a security vulnerability. This vulnerability stemmed from uninitialized usage within WebCodecs, which could allow remote attackers to obtain sensitive information from process memory...

PT-2026-31482

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A heap buffer overflow exists in the WebAudio component of Google Chrome. Successful exploitation of this issue by a remote attacker could lead to the disclosure of potentially sensitiv...

PT-2026-46603

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An out of bounds read in V8 allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. An out of bounds read occurs when the...