CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93850

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106200

A Use after free vulnerability exists in the Track component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page. No specific exploit links or in-the-wild exploitation details are provi...

EUVD-2026-93796

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106347

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw in the Track component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page. The Chromium security severity for this issue is rated as Critical .

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-106875

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-107019

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Track component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 著者: Moshe Kol, Shlomi Oberman このリポジトリには、Track TCP/IP スタック（Ripple20 脆弱性スイートの一部）における重大なヒープベースのバッファオーバーフロー脆弱性 CVE-2020-11896 の PoC エクスプロイトが含まれています。 このエクスプロイトは、NET+OS 7.5 を搭載した Digi Connect ME 9210 デバイス上でリモートコード実行 RCE を達成します。詳細な解説はこちらをご覧ください。...

VLC_CVE-2021-25804_Analysis

AVIファイルには複数のトラックを含めることができます。例えば、オーディオトラックとビデオトラックです。 任意の数のトラックを解析するために、VLCはまず特定のトラックが完成して再生可能かどうかを判定する必要があります。この目的のために2つの変数が設定されています。どちらもitrackという名前です。 ここでは、psys変数がAVIファイルを表します。したがって、完成して再生可能と判定されたトラックを参照するために使用される「正式な」itrack変数はpsys-itrackです。これは次のマクロで初期化されます: TABINITpsys-itrack, psys-track;...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: wildfly, flyway, akhq, apicurio-registry, sonarqube, gradle, opensearch, dependency-track, strimzi-kafka-operator, apache-nifi-registry, tez, druid, keycloak-config-cli, apache-nifi, infinispan, spdx-tools-java, apache-tika, trino, logstash, keycloak, scala,...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: wildfly, flyway, akhq, apicurio-registry, sonarqube, gradle, opensearch, dependency-track, strimzi-kafka-operator, apache-nifi-registry, tez, druid, keycloak-config-cli, apache-nifi, infinispan, spdx-tools-java, apache-tika, trino, logstash, keycloak, scala,...

PT-2026-104513

Name of the Vulnerable Software and Affected Versions Visitor Traffic Real Time Statistics plugin for WordPress versions prior to 8.17 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored DOM-Based Cross-Site Scripting. An attacker can...

PT-2026-104074

The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the page title parameter of the ahcpro track visitor AJAX action. The action is registered for logged-out callers wp ajax...

dependency-track v4.14.4

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: s390/dasd: fixed an issue where error recovery led to data corruption on ESE devices. Extent Space Efficient ESE or thin-provisioned volumes need to be formatted on demand during normal IO processing. The dasdeseneedsformat...