Malicious code in @fmr-ap149494/apex-base-component (npm)

Source: ossf-package-analysis e3505d2eebf31d1938862b6f6744d353fadaf980b9a27860f2a7c36d863828b9 The OpenSSF Package Analysis project identified '@fmr-ap149494/apex-base-component' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated wit...

MAL-2026-17929 Malicious code in @fmr-ap149494/apex-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582d9d611f75576135d06bf83cf71b60a58fbbf475ba61e656bf190a73c5546 The package ships only an empty stub index.js exports and a manifest whose sole dependency, ltidisafe, is declared as a bare HTTPS tarball URL...

Malicious code in @fmr-ap149494/apex-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582d9d611f75576135d06bf83cf71b60a58fbbf475ba61e656bf190a73c5546 The package ships only an empty stub index.js exports and a manifest whose sole dependency, ltidisafe, is declared as a bare HTTPS tarball URL...

Malicious Package

Overview @fmr-ap149494/apex-base-component is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

PT-2026-92729

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

ROS-20260914-73-0024

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260909-73-0039

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Base Component Code Execution

The Base component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Base Component DoS

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-19156

A flaw was found in Google Chrome's Base component. An attacker could convince a user to install a malicious extension, leading to a heap buffer overflow. This vulnerability allows for potential heap corruption, which could be exploited to impact the integrity and availability of the browser...

CVE-2026-72781: Protection Mechanism Failure

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

SUSE CVE-2026-19156

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

EUVD-2026-54126

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-19156

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

Base Component DoS

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-68701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the Base component. This occurs when an attacker convinces a user to install a malicious extension, allowing the exploitation of heap corruption throug...

CVE-2026-11071

An use after free flaw was found in the Base component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499227659...

CVE-2026-11047

An insufficient validation of untrusted input flaw was found in the Base component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498768132...

Chromium: CVE-2026-11071 Use after free in Base

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...