CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 XeroSecurity Sn1per 9.0무료 버전에서는 애플리케이션 실행 시 안전하지 않은 권한0777이 설정되어, 권한이 없는 사용자가 애플리케이션, 모듈 및 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으로 임의 코드 실행이 가능합니다. CVE-2021-39274 XeroSecurity Sn1per 9.0무료 버전에서는 설치 중에 안전하지 않은 디렉터리 권한0777이 설정되어, 권한이 없는 사용자가 메인 애플리케이션과 애플리케이션 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...

CVE-2026-95338

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code within the browser's sandbox by convincing a user to open a specially crafted PDF document. This issue is caused by a use-after-free vulnerability in the PDFium component, where memory is improperly accessed after ...

CVE-2026-95348

A flaw was found in chromium-browser. A use-after-free memory corruption issue exists within the Bluetooth component. A remote attacker who has already compromised the renderer process could exploit this vulnerability by convincing a user to load a crafted HTML page. Successful exploitation could...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95357

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-95353

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95353

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95349

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-95338

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-95331

Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84421

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction...

CVE-2026-95347

Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95318

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...