CVE-2026-14088

An uninitialized use flaw exists in the Canvas component of the Chromium browser, affecting Google Chrome on Android prior to version 150.0.7871.47 . A remote attacker could exploit this vulnerability by serving a crafted HTML page to obtain potentially sensitive information from process memory. ...

Pixel-stealing “Pixnapping” attack targets Android devices

Researchers at US universities have demonstrated how a malicious Android app can trick the system into leaking pixel data. That may sound harmless, but imagine if a malicious app on your Android device could glimpse tiny bits of information on your screen—even the parts you thought were secure,...

EUVD-2022-38180

Malicious code in bioql PyPI...

Mozilla Firefox < 134.0

The version of Firefox installed on the remote Windows host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-01 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption...

Charlie Miller Takes on NFC, Charlie Miller Wins

LAS VEGAS–Do not stand near Charlie Miller. Actually, you might not even want to let him walk past you. It’s not that Miller is a bad person, you understand. The problem is that Miller has figured out a couple of methods that enable him–or an attacker–to use the NFC chip in some phones to exploit...