225259 matches found
EUVD-2026-50774
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17799
CVE-2026-17799 describes insufficient validation of untrusted input in Chrome/Chromium Safe Browsing, allowing a remote attacker to bypass discretionary access control via a malicious file. Affects Chrome/Chromium's Safe Browsing component prior to 151.0.7922.72; upstream issue 514461031 referenc...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17666
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
CVE-2026-17666
CVE-2026-17666 is a cryptographic flaw in Google Chrome (Enterprise) that affected Chrome versions prior to 151.0.7922.72. An attacker in a privileged network position could bypass discretionary access control via malicious network traffic. The CVSS v3.1 base score is 9.1 (CRITICAL). Remediation:...
CVE-2026-17666
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
CVE-2026-17666
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
EUVD-2026-50792
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
PT-2026-65985
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
PT-2026-66192
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66363
A flaw in the PCP linux sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...
PT-2026-66520
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description Improper access control allows authenticated users to access and manipulate build jobs belonging to other users. This issue occurs through the log retrieval and unauthenticated build...
PT-2026-66599
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
Adobe Bridge permission licensing and access control vulnerabilities
Adobe Bridge is a digital asset management and file organization tool developed by Adobe, a company based in the United States. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, allowing...
Linux Distros Unpatched Vulnerability : CVE-2026-17666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access...
PT-2026-66609
Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn ships with default C2 credentials in payload.json and core/payload schema.py, which are passed unchanged to lazyc2.py for HTTP Basic authentication. This allows a...
PT-2026-66118
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Safe Browsing component allows a remote attacker to bypass discretionary access control by using a malicious file. Recommendations Upda...
PT-2026-66623
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists in the ACSE layer during the processing of AARQ PDUs Application Association Request Protocol Data Units during MMS connection establishment. An...
FreeBSD : FreeBSD -- Heap out-of-bounds access in semctl(2) (aa5f956e-8bb8-11f1-a6ab-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aa5f956e-8bb8-11f1-a6ab-bc241121aa0a advisory. The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped...