CVE-2026-5890

Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-5869

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5913

CVE-2026-5913 concerns Blink in Google Chrome/Chromium, where an out-of-bounds memory read could be triggered by a crafted HTML page. The issue is described across multiple sources as an out-of-bounds read in Blink with a Chromium/Chrome context. Public fixes exist: Debian reports the security up...

CVE-2026-5913

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

CVE-2026-5907

Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...

CVE-2026-5890

CVE-2026-5890 describes a race condition in Chrome’s WebCodecs, allowing a remote attacker to potentially read sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome (WebCodecs path). Root cause: race in WebCodecs leading to information disclosure. Impact: po...

CVE-2026-5869

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5869

CVE-2026-5869 is a heap buffer overflow in WebML within Google Chrome/Chromium, exploitable via a crafted HTML page to reveal potentially sensitive process-memory data. Affected: Chromium/WebML prior to 147.0.7727.55. Remediation: upgrade to Chromium 147.0.7727.55 or newer (Debian fix 147.0.7727....

CVE-2026-5864

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5864

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

PT-2026-32542

Name of the Vulnerable Software and Affected Versions jq affected versions not specified Description The strindices builtin in src/builtin.c passes arguments to jv string indexes in src/jv.c without verifying they are strings. Because jv string indexes relies on assert checks that are removed in...

CVE-2025-14858

The CVE targets Semtech LR11xx LoRa transceivers with early firmware versions. During a firmware validity check over SPI, the device decrypts an encrypted firmware package block-by-block; the last decrypted block remains uncleared in memory after validation, enabling an attacker with SPI access t...

ROS-20260407-73-0003

A vulnerability in the sja1105tabledeleteentry function of the drivers/net/dsa/sja1105/sja1105/sja1105staticconfig.c module of the NXP SJA1105 family switch driver of the Linux operating system kernel is related to memory reads outside of the allocated buffer. Exploitation of the vulnerability...

PT-2026-31482

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A heap buffer overflow exists in the WebAudio component of Google Chrome. Successful exploitation of this issue by a remote attacker could lead to the disclosure of potentially sensitiv...