20485 matches found
Microsoft Edge (Chromium) < 151.0.4129.86 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 14, 2026 advisory. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execu...
CVE-2026-73424
Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts xastropath for the public /isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to...
CVE-2026-73424 Astro: Unauthenticated path override in the @astrojs/vercel ISR function
Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts xastropath for the public /isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to...
CVE-2026-73424 Astro: Unauthenticated path override in the @astrojs/vercel ISR function
Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts xastropath for the public /isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to...
EUVD-2026-60306
Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts xastropath for the public /isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to...
CVE-2026-73424
The Astro Vercel adapter (10.0.3–11.0.2) in entrypoint.ts trusts the x_astro_path header for the /_isr function based only on x-vercel-isr, letting unauthenticated GET requests render routes protected only by Vercel edge path rules or split edge middleware. CVSS 6.5 MEDIUM (AV:N/AC:L/PR:N/UI:N/S:...
Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager
Summary Multiple vulnerabilities were addressed in IBM Edge Application Manager 5.0.4 Vulnerability Details CVEID:CVE-2025-48988 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from...
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-58754
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72970
Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: mattermost, datadog-agent, rke2-runtime-fips, cloudbeat, beats-fips, elastic-agent-fips, elastic-agent, containerd, commercial-grafana, grafana, kine, cloudbeat-fips, rke2-runtime, frankenphp-8.4, consul, loki, datadog-agent-fips, vault, frankenphp-8.5, frankenphp-8....
Siemens Solid Edge SE2025 < V225.0 Update 15 / SE2026 < V226.0 Update 7 Multiple Vulnerabilities (SSA-621657)
The version of Siemens Solid Edge installed on the remote Windows host is SE2025 prior to V225.0 Update 15, or SE2026 prior to V226.0 Update 7. It is, therefore, affected by multiple file parsing vulnerabilities: - The affected applications contains an out of bounds read vulnerability while parsi...
next: Next.js: Denial of Service via excessive memory consumption in Server Actions
A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service DoS due to resource exhaustion...
CVE-2026-19158 Use after free in Views
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium) < 151.0.4129.78 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.78. It is, therefore, affected by multiple vulnerabilities as referenced in the August 11, 2026 advisory. - Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows...