EUVD-2026-79960

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91744

A race condition in the PlatformIntegration component of Google Chrome on Mac (prior to version 153.0.8010.47 ) allows a remote attacker to obtain sensitive information. This attack requires the adversary to have already compromised the renderer process and to use social engineering to lead the u...

CVE-2026-91743

A race condition in the Core component of Google Chrome prior to version 153.0.8010.47 allows a remote attacker to execute arbitrary code outside the sandbox. Exploitation requires a compromised renderer process and a crafted HTML page. Impact is categorized as High severity. Remediation includes...

CVE-2026-91712

A race condition in the Extensions component of Google Chrome on macOS (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability impacts Chromium-based browsers , inc...

CVE-2026-91724

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79957

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91724

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91724

A use after free vulnerability in the Input component of Google Chrome (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability also impacts Microsoft Edge (Chromium...

CVE-2026-83200

Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...

CVE-2026-83477

Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...

EUVD-2026-79765

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

EUVD-2026-79552

Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...

GHSA-JFW3-2GCF-23R5 Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxc3-xpmc-vmvr. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts...

Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxc3-xpmc-vmvr. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts...

GHSA-55P4-8J34-JV53 Duplicate Advisory: Vikunja: Unbounded CSV row cardinality permits API process termination

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pqf9-h8g4-8gmh. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the POST /api/v2/migration/csv/migrate...

Malicious Package

Overview process-tailwind is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @biz44/process-runtime-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview process-lhpm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...