328411 matches found
CVE-2026-111105
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
CVE-2026-110922
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-110915
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Microsoft Edge (Chromium) < 155.0.4283.62 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 155.0.4283.62. It is, therefore, affected by multiple vulnerabilities as referenced in the October 16, 2026 advisory. - Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker ...
PT-2026-116086
WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feed id endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass travers...
NetScaler ADC and NetScaler Gateway Memory Overflow (CTX697191 / CVE-2026-107406)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.29, or 14.1 prior or equal to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.283, or 14.1-FIPS prior or equal to 14.1-73.41 FIPS. It is, therefore, affected by a vulnerabilit...
Linux Distros Unpatched Vulnerability : CVE-2026-110921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-110920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
CVE-2026-110920
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Microsoft Windows HEVC Video Extensions < 2.4.87.0 RCE (October 2026)
The Windows 'HEVC Video Extensions' app installed on the remote host is prior to 2.4.87.0. It is, therefore, affected by a remote code execution vulnerability. Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
Security Update for Microsoft .NET Core (October 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
Linux Distros Unpatched Vulnerability : CVE-2026-110922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...
CVE-2026-110919
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Security Update for Microsoft .NET Core SDK (October 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an...
Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 Multiple Vulnerabilities (October 2026)
The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by multiple vulnerabilities: - Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized...
UBUNTU-CVE-2026-111105
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
PT-2026-115669
MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS REFCURSORs and then fetc...
PT-2026-115671
Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server versions prior to 10.11.19 MariaDB server versions prior to 11.4.13 MariaDB server server versions prior to 11.8.9 MariaDB server versions prior to 12.3.3 MariaDB server versions...
Linux Distros Unpatched Vulnerability : CVE-2026-110916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...
