CVE-2026-17697

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50817

Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17674

CVE-2026-17674 affects Google Chrome (Chromium-based) before 151.0.7922.72 due to an inappropriate HTML implementation that allows a remote attacker to bypass Content Security Policy via a crafted HTML page. The issue is rated High severity; CVSS v3.1 shows 6.5 (I:H, A:N, V:N) with network attack...

CVE-2026-51295

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2026-66142

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in WebXR allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from one...

PT-2026-65975

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-66320

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66403

Name of the Vulnerable Software and Affected Versions PCP Performance Co-Pilot pmproxy service affected versions not specified Description A flaw in the pmproxy service allows a remote attacker to send a specially crafted request to the pmLogLoadInDom function. This action bypasses a critical...

The vulnerability of the x25_queue_rx_frame() function in the net/x25/x25_in.c module, a part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

CVE-2026-51295

SQLite 3.41 is vulnerable to a use-after-free in the jsonExtractFunc function, where premature release of parsed JSON object memory leads to illegal access of freed pointers. This remote flaw allows crafted SQL queries to crash the service and may leak sensitive memory information. Root cause: pr...

PT-2026-66537

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access versions 11.0 through 11.0.2 IBM Security Verify Access versions 10.0 through 10.0.9.1 IBM Verify Identity Access Container versions 11.0 through 11.0.2 IBM Security Verify Access Container versions 10.0 through...

PT-2026-66250

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-66314

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

VulnCheck KEV: CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30700)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from improper handling of substitute inputs by the regexremap plugin. Attackers can exploit this...

PT-2026-66053

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a...

Linux Distros Unpatched Vulnerability : CVE-2026-17743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted...

nodejs: Node.js: Denial of Service via DNS responses with excessive A records

A denial of service DoS vulnerability in Node.js allows a remote attacker to crash the application. By sending a specially crafted DNS response with an excessive number of 'A' records, an attacker can cause the dns.resolveAny function to unexpectedly abort the process...