DEBIAN-CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102326

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102306

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contiene una vulnerabilidad SSTI, que resulta en una inyección de código arbitrario para todos los usuarios que tienen acceso a editar un formulario título de envío. Las versiones vulnerables son v5.0.0 test % set form = freeform.form'pentest' % % if form %...

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102316

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89387

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89384

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102299

A type confusion flaw was identified in the V8 component of Google Chrome prior to version 154.0.8037.92 . This vulnerability could allow a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . Remediation is available in Chrome version 154.0.8037.92 for Wi...

CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102331

A buffer overflow vulnerability in the ANGLE component of Google Chrome on Android (prior to version 154.0.8037.92 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox . The attack can be initiated through a crafted HTML page . Exploitation details are not provided...

EUVD-2026-89373

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76732

A local privilege-escalation vulnerability exists in a daemon of HPE Networking Instant ON . If successful, a local attacker could achieve arbitrary code execution with root privileges , provided that certain preconditions outside of the attacker's control are met. No specific exploit details or ...

EUVD-2026-89340

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

CVE-2026-95286

A flaw was found in chromium-browser. A type confusion vulnerability—where data is processed using an incompatible data type—exists in the browser's Bindings component. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page, leading to arbitrary code...

CVE-2026-97475

A flaw was found in the Linux kernel's Tegra SOCTHERM driver. When the driver is removed, registered cooling devices are not unregistered from the thermal framework, leaving stale references to memory that has already been released. This leads to a use-after-free vulnerability, where the system...

CVE-2026-95325

A flaw was found in the ANGLE component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, which occurs when memory is referenc...

CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 En XeroSecurity Sn1per 9.0 versión gratuita, se establecen permisos inseguros 0777 al ejecutar la aplicación, lo que permite a un usuario sin privilegios modificar la aplicación, los módulos y los archivos de configuración. Esto conduce a la ejecución arbitraria de código con...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...