CVE-2026-91467

A vulnerability exists in the Framework component of Oracle Fusion Middleware Control (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). The flaw allows an attacker with physical access to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to a t...

CVE-2026-101735

A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...

CVE-2026-113029

Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113029

Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113029

Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113029

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper access control issue within the ANGLE component. A remote attacker can exploit this vulnerability by leveraging a crafted HTML page to potentially execute arbitrary code inside the sandbox. While the Chromium security sev...

CVE-2026-113297

Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113297

Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113297

A remote attacker can leak sensitive information via a crafted HTML page due to an improper access control vulnerability in Ozone within Google Chrome . This issue affects versions prior to 156.0.8078.47 . No specific exploit details or additional remediation steps are provided in the documents.

CVE-2026-113159

Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113159

Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113159

Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113159

A flaw in Google Chrome (prior to version 156.0.8078.47 ) involves an improper access control weakness within the Developer Tools (DevTools) . A remote attacker can exploit this by tricking a user into opening a specially crafted HTML page, which can lead to the unauthorized exposure of sensitive...

CVE-2026-113030

Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113030

A vulnerability exists in the V8 JavaScript engine within Google Chrome (prior to version 156.0.8078.47 ) due to improper access control . A remote attacker can exploit this by tricking a user into visiting a crafted HTML page to bypass the web origin policy . This policy is a critical security b...

CVE-2026-113030

Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113129

Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113129

Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113129

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper access control flaw within its Extensions component. A remote attacker could exploit this by using a crafted HTML page to potentially leak sensitive information . No specific exploit details or in-the-wild exploitation in...

net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server

A flaw was found in Go's HTTP/2 server implementation. A remote attacker can bypass connection-level flow control limits—mechanisms that regulate incoming network data—potentially causing excessive memory consumption and a Denial of Service DoS. This issue occurs because the server improperly...