CVE-2026-110141

Google Chrome versions prior to 155.0.8059.79 are vulnerable to an observable discrepancy flaw within the Media component. A remote attacker can exploit this vulnerability by using a crafted HTML page to leak cross-origin data . This issue has been addressed in the stable channel update for Windo...

CVE-2026-110166

A buffer overflow flaw exists in the Animation component of the Google Chrome browser (prior to version 155.0.8059.79 ). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The flaw was reported by Syn4pse and is classifi...

CVE-2026-110149

Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103841

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-103840

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-103842

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-103842

Adobe Substance 3D Stager is affected by an out-of-bounds read vulnerability (CWE-125) triggered when parsing a crafted file. This flaw can cause the application to read past the end of an allocated memory structure, potentially allowing an attacker to execute arbitrary code within the context of...

CVE-2026-103842 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-103841

The software Adobe Substance 3D Stager is affected by an out-of-bounds read vulnerability (CWE-125) occurring during the parsing of a crafted file. This flaw allows for a read past the end of an allocated memory structure, which could potentially enable an attacker to execute code within the cont...

CVE-2026-103841 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-103840

Adobe Substance 3D Stager is affected by an out-of-bounds read vulnerability (CWE-125) triggered when parsing a crafted file. This flaw allows a memory read past the end of an allocated structure, which an attacker could leverage to achieve arbitrary code execution in the context of the current u...

CVE-2026-103840 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

cpio: GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives

A flaw was found in GNU cpio. This vulnerability involves uncontrolled memory allocation when processing specially crafted cpio archives. A remote attacker could exploit this by providing a malicious archive, leading to a stack overflow and causing the cpio process to crash. This results in a...

CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110036

A flaw exists in device-mapper-persistent-data where a local attacker can trigger a Denial of Service (DoS) . The vulnerability is caused by an arithmetic error in the synchronous block reading logic. By inducing a user or system tool to process crafted device metadata containing an excessively l...

SUSE CVE-2026-109273

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

CVE-2026-108384: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parsefixed interpolates a fixed type's aliases value directly into a generated types.confixed...

PT-2026-113284

Name of the Vulnerable Software and Affected Versions Substance3D - Stager affected versions not specified Description An out-of-bounds read occurs when parsing a specially crafted file, allowing a read operation to extend beyond the end of an allocated memory structure. This can be leveraged to...

PT-2026-113283

Name of the Vulnerable Software and Affected Versions Substance3D - Stager affected versions not specified Description An out-of-bounds read occurs when parsing a specially crafted file, allowing a read operation to extend beyond the end of an allocated memory structure. This can be leveraged to...

PT-2026-113282

Name of the Vulnerable Software and Affected Versions Substance3D - Stager affected versions not specified Description An out-of-bounds read occurs when parsing a specially crafted file, allowing a read operation to extend beyond the end of an allocated memory structure. This can be leveraged to...