CVE-2026-21094

Improper input validation in wpasupplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory...

CVE-2026-21094

CVE-2026-21094 is an improper input validation flaw in wpa_supplicant on Samsung Mobile devices prior to the SMR Sep-2026 Release 1 security update. The flaw allows an adjacent attacker to perform an out-of-bounds memory write . Per the vendor-assigned CVSS 4.0 score of 6.1 (MEDIUM) , the attack ...

EUVD-2026-74635

Improper input validation in wpasupplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory...

CVE-2026-87628

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-87578

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

EUVD-2026-74493

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-87578

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-87578

CVE-2026-87578 is a use-after-free vulnerability in the Receiver component of Google Chrome prior to version 153.0.8010.36 . An adjacent network attacker can exploit it via crafted network traffic to achieve arbitrary code execution outside the Chrome sandbox , with a CVSS 3.1 score of 8.3 (HIGH)...

CVE-2026-87628

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-87628

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-87628

A use-after-free vulnerability in the Cast component of Google Chrome prior to version 153.0.8010.36 allows an adjacent-network attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. The Chromium project rates the severity as Critical , and the CVSS 3.1 ba...

EUVD-2026-74485

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

PT-2026-88678

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

PT-2026-88728

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

EUVD-2026-69464

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations,...

CVE-2026-73709

HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...

CVE-2026-73709 Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

EUVD-2026-69430

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

EUVD-2026-69577

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...