116887 matches found
CVE-2026-79001
A flaw was found in Bluetooth in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the disclosure of sensitive information...
CVE-2026-79006
A flaw was found in Google Chrome. This vulnerability, located in the HttpsUpgrades component, allows a remote attacker to bypass the web origin policy. By sending specially crafted network traffic, an attacker could circumvent security restrictions designed to isolate content from different...
CVE-2026-79122
A flaw was found in Google Chrome. A remote attacker could exploit an information leak vulnerability in the SignIn component by sending crafted network traffic. This could allow the attacker to obtain sensitive information...
CVE-2026-79026
A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...
CVE-2026-87605
A flaw was found in Google Chrome's Contacts feature. A remote attacker, after compromising the renderer process and employing social engineering tactics, could potentially exploit this missing authorization. This could allow the attacker to obtain sensitive user information by tricking a user in...
CVE-2026-87459
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the Select component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...
CVE-2026-87632
A flaw was found in Chromium. This vulnerability, known as cross-site scripting XSS, exists within the SanitizerAPI. A remote attacker could exploit this by creating a specially designed web page, allowing them to bypass security restrictions and potentially gain unauthorized access to sensitive...
CVE-2026-87591
A flaw was found in Chromium's Extensions component. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions by using a specially crafted Chrome extension. This could lead to unauthorized access to sensitive system resources...
CVE-2026-87550
A flaw was found in Google Chrome. A remote attacker could exploit improper encoding or escaping of output within the browser's Cascading Style Sheets CSS component. By delivering a specially crafted HTML page, the attacker could potentially bypass the web origin policy. This policy is a critical...
CVE-2026-79261
A flaw was found in Google Chrome. A remote attacker could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive data or actions within the user's...
CVE-2026-79050
A flaw was found in Google Chrome's Network component. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by enticing a user to open a specially crafted HTML page. This could lead to unauthorized access to system...
ROS-20260925-73-0185
The vulnerability of the dwhdmirockchipunbind function in the drivers/gpu/drm/rockchip/dwhdmi-rockchip.c driver for the Direct Rendering Infrastructure DRI module of the Linux operating system is related to the use of memory after release. Exploiting this vulnerability can allow a remote attacker...
FFmpeg MACE6 Decoder Memory Damage Code Execution
The vulnerability of the MACE6 decoder for FFmpeg’s multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...
pdns/dnsdistdist/html/local.js Arbitrary HTML Injection
The vulnerability of the update function in the pdns/dnsdistdist/html/local.js file of the load balancer and proxy for DNS traffic is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...
golang-x-net Clickjacking
The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...
OpenBao secret encryption management system Name Reference DoS
The vulnerability of the OpenBao encryption and secret management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to cause service failures...
NVIDIA NVDEC Hardware Decoder
The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library lies in the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...
USN-8820-1: curl vulnerabilities
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-13608 Stephan...
camel-aws2-sqs: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers
A flaw was found in Apache Camel AWS2-SQS Component. This vulnerability allows a remote attacker, with permissions to send messages to a consumed SQS queue, to inject arbitrary Camel control headers into the message exchange. This is due to a missing inbound header filter strategy. The injected...
