22431 matches found
PT-2026-46581
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A type confusion issue exists in the GPU component on Windows. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by improper implementation in the GPU. A remote attacker could exploit this vulnerability to leak cross-source data through specially...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a buffer overflow vulnerability. This vulnerability stemmed from excessive writing by the GPU component, which could allow remote attackers to exploit the vulnerability through...
CVE-2026-8993: Improper Neutralization of Special Elements in Output Used by a Downstream Component
D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastructure and to conduct SSRF Server Side...
SUSE SLES15 Security Update : kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2189-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2189-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues The following security issues were fixed: -...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs in the GPU component. It could allow remote attackers who have...
PT-2026-45874
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Decoding a maliciously-crafted MIME header containing many invalid encoded-words can lead to excessive CPU consumption. Recommendations At the moment, there is n...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by a race condition in the GPU component. This vulnerability could allow remote attackers with access to the compromised renderer process to exploit t...
The vulnerability of the database module of the OTRS order processing system allows a hacker to bypass existing security mechanisms.
The vulnerability of the database module of the OTRS request processing system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms remotely...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by a confusion in the type of GPU components. This vulnerability could allow remote attackers with access to the damaged rendering process to exploit...
Ubuntu 25.10 / 26.04 LTS : OpenJDK 26 vulnerabilities (USN-8341-1)
The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8341-1 advisory. Thomas Beckers discovered that the JAXP component of OpenJDK 26 did not correctly authenticate certain APIs. A remote unauthenticated attacker...
The vulnerability of the parse_header() function in the cpp-httplib library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the parseheader function in the cpp-httplib library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2025-60483
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the gfac4presb4backchannelspresent function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to caus...
MiracleLinux 8 : compat-libtiff3-3.9.4-15.el8_10 (AXSA:2026-739:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-739:01 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the...
CVE-2026-24088
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader...
CVE-2026-24090
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...
CVE-2025-59609
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length...
CVE-2026-25259
Memory corruption while processing multiple IOCTL command for escape operations...
CVE-2026-24090
Technical details (affected products, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from the vendors and CVE feed.
