vulnerability_struts-2.3.31

vulnerabilitystruts-2.3.31 Build the struts-2.3.31 CVE-2017-5638 environment. https request is possible. environment Ubuntu 20.04 Docker 20.10.12 curl 7.68.0 Server Startup We will use the tomcat:7.0-jre8 docker image. Unzip struts-2.3.31.zip in a directory of your choice. cd struts-2.3.31 sudo...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Animation component. A remote attacker could exploit this by providing a crafted HTML page to potentially achieve arbitrary code execution inside the sandbox. No specific exploit details or direct mitigat...

CVE-2026-118312

Google Chrome contains a memory corruption vulnerability in the Paint component affecting versions prior to 156.0.8078.73 . A remote attacker could leverage this flaw by navigating a victim to a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerabili...

CVE-2026-118319

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue in the Skia component. A remote attacker could exploit this by using a crafted HTML page to potentially read memory inside the sandbox . No specific exploit details or in-the-wild exploitation information ar...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118319

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118309

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a security flaw caused by improper input validation in the UI. A remote attacker can exploit this by delivering a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox . This issue has a High...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

A Use after free vulnerability exists in the WTF component of Google Chrome prior to version 156.0.8078.73 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page to the victim. The vulnerability has been observed in the wild according to e...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue caused by improper input validation in SVG . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. The vulnerability impacts confide...

CVE-2026-118330

A Use after free vulnerability in the Browser component of Google Chrome on Windows allows a remote attacker to execute arbitrary code inside the sandbox using a crafted HTML page. This vulnerability affects versions prior to 156.0.8078.73 . Remediation requires updating to the latest version of ...

CVE-2026-118347

Google Chrome versions prior to 156.0.8078.73 are affected by a Use after free vulnerability in the FileSystem component. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page . The vulnerability has a High security severity. No specific...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...