CVE-2026-78901

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-72924 GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

CVE-2026-65082

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65082

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command that allows a local attacker to cause code injection. A successful exploit may lead to code execution, data tampering, information disclosure, and denial of service . The vulnerability carries a CVSS 3.1 base score of 7.0...

EUVD-2026-66100

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-78964

Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78914

CVE-2026-78914 is an uninitialized resource vulnerability in the Skia rendering library within Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page, potentially allowing memory reads inside the Chrome sandbox (information disclosure). Th...

EUVD-2026-66084

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78915

A race condition in the Enterprise component of Google Chrome on Windows (prior to 152.0.7977.65 ) allows an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. The vulnerability is rated CVSS 7.5 (High) under CVSS 3.1, though Chromium's intern...

CVE-2026-79126

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...

CVE-2026-79254

CVE-2026-79254 is an incorrect reference resolution vulnerability in the CustomTabs component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass system access restrictions. Chromium rates it Low severity; the CVSS 3.1 sc...

CVE-2026-79126

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78957

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. Chromium security severity: Low...

CVE-2026-78957

CVE-2026-78957 is an information leak in Google Chrome Mobile on iOS affecting versions prior to 152.0.7977.65 . A local attacker can obtain sensitive information by supplying a crafted file to the browser. Chromium classifies the severity as Low , with a CVSS 3.1 score of 5.5 (Medium) reflecting...