Lucene search
+L

37286 matches found

Positive Technologies
Positive Technologies
added 3 days ago11 views

PT-2026-66757

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...

2.1CVSS5.7AI score0.00141EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 4 days ago4 views

CVE-2026-17694

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517511796...

8.8CVSS5.8AI score0.00464EPSS
SaveExploits0References5
OSV
OSV
added 4 days ago4 views

ECHO-2F95-C61A-F7A3

Bulletin has no description...

7.5CVSS5.8AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago3 views

ECHO-C166-2243-A830

Bulletin has no description...

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago9 views

CVE-2026-58066

Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside...

9.8CVSS0.00209EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago41 views

CVE-2026-58066

Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside...

9.8CVSS0.00209EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago4 views

CVE-2026-58066

Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside...

9.8CVSS7.3AI score0.00209EPSS
SaveExploits0References4
OSV
OSV
added 4 days ago3 views

DEBIAN-CVE-2026-17990

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

9.6CVSS5.9AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago8 views

CVE-2026-17987

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

9.6CVSS0.00206EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 4 days ago6 views

CVE-2026-17990

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

9.6CVSS5.9AI score0.00206EPSS
SaveExploits0
EUVD
EUVD
added 4 days ago6 views

EUVD-2026-50916

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

9.6CVSS5.9AI score0.00206EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago45 views

CVE-2026-17987

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

0.00206EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 4 days ago5 views

CVE-2026-17987

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

9.6CVSS5.9AI score0.00206EPSS
SaveExploits0
EUVD
EUVD
added 4 days ago5 views

EUVD-2026-50859

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00119EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago41 views

CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Medium...

0.0027EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago12 views

CVE-2026-17803

CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...

9.6CVSS5.9AI score0.00258EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 4 days ago5 views

CVE-2026-17803

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00258EPSS
SaveExploits0
Debian CVE
Debian CVE
added 4 days ago7 views

CVE-2026-17694

Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00464EPSS
SaveExploits0
EUVD
EUVD
added 4 days ago5 views

EUVD-2026-50820

Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00464EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago7 views

PT-2026-66009

Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder