CVE-2026-113079

A flaw was found in the SiteIsolation component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering a use-after-free memory error. Successful exploitation allows the attacker to execute arbitrary code within the...

CVE-2026-113200

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563350676...

CVE-2026-113001

A flaw was found in chromium-browser. A use-after-free vulnerability in the Workers component allows a remote attacker to execute arbitrary code inside the browser sandbox. To exploit this flaw, an attacker must trick a user into opening a specially crafted HTML page...

CVE-2026-113101

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is due to a use-after-free condition in the SiteIsolation component, which occurs when memory is...

CVE-2026-113210

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563354824...

CVE-2026-113181

A flaw was found in the Navigation component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to open a specially crafted web page. The issue stems from a use-after-free condition, which occurs when the application...

CVE-2026-113163

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the Web Graphics Library WebGL component allows a remote attacker to execute arbitrary code within the application sandbox. By tricking a user into visiting a maliciously crafted web page, an attacker can exploit...

CVE-2026-113076

A flaw was found in the Toolbar component of Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by tricking a user into opening a specially crafted HTML page. The issue is caused by a use-after-free condition, where the application...

CVE-2026-113028

A flaw was found in the Media component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue occurs due to a use-after-free condition, where the applicati...

CVE-2026-113327

A flaw was found in the Chromecast component of Chromium. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to reference memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a specially...

CVE-2026-113190

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page...

CVE-2026-113140

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536445815...

CVE-2026-113275

A flaw was found in Chromium. A use-after-free memory vulnerability in an application programming interface API allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to load a specially crafted HTML page...

CVE-2026-113198

A flaw was found in chromium-browser. A use-after-free memory flaw exists within the Extensions subsystem, where memory is improperly accessed after it has been freed. By enticing a user to visit a specially crafted HTML page, a remote attacker could trigger this vulnerability to execute arbitrar...

CVE-2026-113075

A flaw was found in the DevTools component of Chromium. A remote attacker could execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. This vulnerability is caused by a use-after-free condition, where the application improperly references memory that...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114094

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114059

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

EUVD-2026-106915

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...