203695 matches found
CVE-2026-17787
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17780
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50728
Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17772
Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17697
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
EUVD-2026-50817
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17674
CVE-2026-17674 affects Google Chrome (Chromium-based) before 151.0.7922.72 due to an inappropriate HTML implementation that allows a remote attacker to bypass Content Security Policy via a crafted HTML page. The issue is rated High severity; CVSS v3.1 shows 6.5 (I:H, A:N, V:N) with network attack...
CVE-2026-51295
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51295
SQLite 3.41 is vulnerable to a use-after-free in the jsonExtractFunc function, where premature release of parsed JSON object memory leads to illegal access of freed pointers. This remote flaw allows crafted SQL queries to crash the service and may leak sensitive memory information. Root cause: pr...
PT-2026-66401
Name of the Vulnerable Software and Affected Versions PCP pmproxy affected versions not specified Description An unauthenticated remote attacker can bypass access controls by sending crafted requests to the '/store' endpoint. This allows the attacker to overwrite any PMDA metric, which can lead t...
PT-2026-66142
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in WebXR allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from one...
PT-2026-66320
Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
PT-2026-65975
Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
The vulnerability of the x25_queue_rx_frame() function in the net/x25/x25_in.c module, a part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
PT-2026-66403
Name of the Vulnerable Software and Affected Versions PCP Performance Co-Pilot pmproxy service affected versions not specified Description A flaw in the pmproxy service allows a remote attacker to send a specially crafted request to the pmLogLoadInDom function. This action bypasses a critical...
PT-2026-66314
Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...
VulnCheck KEV: CVE-2026-40217
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...
PT-2026-66447
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...