2057 matches found
LoongBleed
LoongBleed 中文 LoongBleed is a hardware vulnerability, conceptually similar to ZenBleed CVE-2023-20593 — affecting Loongson LA464/LA664 processors that implement both LSX 128-bit SIMD and LASX 256-bit SIMD. On LoongArch, the LSX $vr registers 128-bit alias the lower half of the LASX $xr registers...
CP-XR-DE21-S--4G-Router-Vulnerabilities
CP-XR-DE21-S--4G-Router-Vulnerabilities This report is for CVE-2025-44039 reserved for Router UART vulnerability assigned to Discoverer Yashodhan Vivek Mandke. Please download the report pdf in this repositoy...
Beyond the Headset: A Systematization of Knowledge on Extended Reality Privacy and Security in Healthcare
Extended reality XR systems are increasingly used in healthcare applications ranging from surgical planning to remote rehabilitation and mental health support. However, the rich streams of sensor, biometric, behavioral, and environmental data that enable these applications also introduce...
GAZEleak: Passcode Inference against Eye-Tracking XR Devices through External Observation
Mixed-reality headsets such as Apple Vision Pro replace the touch screen with gaze-as-pointer interaction: the wearer looks at a target and confirms with an air pinch. Because the display is inside the headset and the eye tracker is walled off from third-party software, such input is widely assum...
Astra Linux – Vulnerability in Chromium
The information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...
CVE-2026-79125
A flaw was found in Google Chrome. This information leak vulnerability, specifically within the XR component, allows a remote attacker to obtain sensitive information. The attacker can achieve this by enticing a user to visit a specially crafted HTML page. This could lead to the unauthorized...
Cisco IOS XR Software Security Hardening Release: September 2026 (cisco-sa-hardening-iosxr-qg64NcM)
According to its self-reported version, Cisco IOS XR is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco IOS XR Software due to improper resource control issues could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service conditio...
ROS-20260915-73-0177
The vulnerability of the XR web browsers Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Astra Linux – Vulnerability in Chromium
In WebXR in Google Chrome, out-of-bounds memory access before version 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
The vulnerability of Cisco IOS XR operating systems, related to the compromised data protection mechanism, allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to potentially compromise the integrity and accessibility of protected information...
The vulnerability of Cisco IOS XR operating systems, related to the implementation of incorrect control flow, allows attackers to trigger service interruptions.
The vulnerability of Cisco IOS XR operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of Cisco IOS XR operating systems, related to incorrect calculations, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Cisco IOS XR operating systems arises from inadequate control over resources throughout their entire lifecycle. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to inadequate control over resources throughout their entire lifecycle. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Cisco IOS XR operating systems, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of Cisco IOS XR operating systems, related to insufficient validation of message correctness or data structure, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Cisco IOS XR operating systems, related to improper handling of exceptional states, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2026-9215
A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...
CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices
A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...
CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices
A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...
Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.
The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...