EUVD-2026-89383

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102307

Google Chrome on Android versions prior to 154.0.8037.92 is vulnerable to an uninitialized resource flaw in the Dawn component. A remote attacker can exploit this by providing a crafted HTML page to read memory outside the sandbox. No specific exploitation details or remediation steps are provide...

CVE-2026-102300

A vulnerability in the WebGPU component of Google Chrome (prior to version 154.0.8037.92 ) stems from an uninitialized resource flaw. This condition allows a remote attacker to obtain cross-origin data by tricking a user into visiting a crafted HTML page . No specific exploit links or alternative...

CVE-2026-102303

Google Chrome on Android versions prior to 154.0.8037.92 is vulnerable to an uninitialized resource in the GPU . This flaw allows a remote attacker to obtain cross-origin data by interacting with a crafted HTML page. The Chromium security severity for this issue is High . No specific exploit deta...

CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102311

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102307

Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102307

Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-97923

A flaw was found in the Linux kernel's tracing subsystem. When initialization of a histogram variable reference fails during trace event configuration, the allocated memory is not properly released. A local user with administrative or tracing privileges can exploit this vulnerability by repeatedl...

CVE-2026-102616

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection...

Uncontrolled Resource Consumption

zstd-jni is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper validation of negative length parameters in ZstdInputStreamNoFinalizer.read, which allows an attacker to trigger an infinite loop that holds the stream monitor and blocks other threads from accessing...

CVE-2026-95359

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513162143...

CVE-2026-95324

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537857253...

CVE-2026-95293

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550953039...

CVE-2026-102616

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection...

CVE-2026-102616 risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection...

CVE-2026-102616

A SQL injection vulnerability exists in risesoft-y9 WorkFlow-Engine up to version 9.6.10 . The flaw is located within the getByIdAndYear function of the CustomHistoricProcessServiceImpl.java file in the OAuth2 Resource Filter component. By manipulating the year/processInstanceId arguments, an att...

EUVD-2026-89335

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection...