CVE-2026-19559

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19559

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19559

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19557

CVE-2026-19557 is a use-after-free in Chrome’s TabStrip on macOS, allowing a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. Affects Google Chrome versions prior to 151.0.7922.137 (Mac; also 151.0.7922.137/138 for Windows/macOS per the Chrome stable update...

CVE-2026-68172

A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...

CVE-2026-68276

A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words dwords into a buffer allocated for only 16 dwords 64 bytes...

CVE-2026-70306

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-62914

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56765

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-56703

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56700

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56602

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56590

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56416

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56291

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-68240

A flaw was found in the Linux kernel's drm/gpusvm component. When drmgpusvmgetpages encounters an error during page mapping, it fails to properly unmap previously created device mappings. This oversight can lead to a device mapping leak, consuming system resources and potentially impacting system...

CVE-2026-19168

A flaw was found in V8 in Google Chrome. An inappropriate implementation allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to unauthorized code execution...

CVE-2026-19172

A flaw was found in Chromium's Views component. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially lead to a sandbox escape, allowing the attacker to execute code outside the confined...