CVE-2026-106417

An integer overflow flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536471438...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...

CVE-2026-106386

An uninitialized resource flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553156221...

CVE-2026-106401

An out of bounds write flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553129739...

CVE-2026-106375

An incomplete cleanup flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536507840...

CVE-2026-106414

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504223609...

CVE-2026-106412

A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520755056...

CVE-2026-97676

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape...

MiracleLinux 8 : thunderbird-140.16.0-1.el8_10.ML.1 (AXSA:2026-1976:23)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1976:23 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...

CVE-2026-107181: Improper Neutralization of Record Delimiters

Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including...

Linux Distros Unpatched Vulnerability : CVE-2026-106255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-106346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox...

Linux Distros Unpatched Vulnerability : CVE-2026-106417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-106373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-106248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-106358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-106323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-106238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-106240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...