EUVD-2026-124039

Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124079

Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124094

Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124107

Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124084

Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124117

Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-124141

A security vulnerability has been detected in Moonshot AI Kimi Code up to 2.5.2. This affects the function isOriginAllowed of the file apps/kimi-code/dist-web/assets/index-HU0LCM-X.js of the component Web UI. Such manipulation of the argument kimiorigin leads to open redirect. The attack can be...

EUVD-2026-124036

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

EUVD-2026-123881

A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.4 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1...

EUVD-2026-123836

A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to cause a denial of service via a specially crafted attachme...

EUVD-2026-123824

A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or...

EUVD-2026-123828

A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege account takeover via...

CVE-2026-126935

The Zipline software, in versions prior to 4.8.0 , is susceptible to a race condition vulnerability within the src/server/routes/raw/[id].ts component. This issue stems from non-atomic view counting , which allows remote attackers who possess a file link to bypass maxViews limits. By sending para...

CVE-2026-126757

A security vulnerability exists in Moonshot AI Kimi Code (versions up to 2.5.2) within the Web UI component. Specifically, the isOriginAllowed function in the file apps/kimi-code/dist-web/assets/index-HU0LCM-X.js is susceptible to manipulation. By manipulating the kimi_origin argument, an attacke...

CVE-2026-126920

Google Chrome versions prior to 157.0.8103.78 are vulnerable to an information leak within the Skia component. This flaw allows a remote attacker to obtain cross-origin data by interacting with a crafted HTML page . The vulnerability is classified with a High security severity by Chromium. Remedi...

CVE-2026-126857

Google Chrome versions prior to 157.0.8103.78 are vulnerable to an out-of-bounds read within the Skia component. This flaw allows a remote attacker to obtain cross-origin data by leveraging a crafted HTML page . The vulnerability is assigned a high security severity by Chromium. Remediation is av...

CVE-2026-126856

Google Chrome versions prior to 157.0.8103.78 are vulnerable to a high-severity security flaw caused by incomplete cleanup in Cache . A remote attacker can exploit this issue by using a crafted HTML page to obtain cross-origin data . No specific exploit details or in-the-wild exploitation informa...

CVE-2026-126884

Google Chrome versions prior to 157.0.8103.78 are vulnerable to an out-of-bounds read within the Skia component. A remote attacker can exploit this vulnerability by providing a crafted HTML page to read memory outside the sandbox. The Chromium security severity for this issue is rated as High . R...

CVE-2026-126896

A missing authorization vulnerability in the V8 engine of Google Chrome (prior to version 157.0.8103.78 ) allows a remote attacker to bypass the web origin policy by leveraging a crafted HTML page. This issue is classified with a High security severity. Remediation is available in the 157.0.8103....

CVE-2026-126903

Google Chrome on Windows, prior to version 157.0.8103.78 , is vulnerable to a High severity security issue due to improper state validation in the ANGLE component. A remote attacker can exploit this vulnerability by using a crafted HTML page to bypass web origin policy . Remediation is available ...