Chromium CVE-2026-113002: Memory corruption

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-112994: Memory corruption

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-112992: Memory corruption

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

JFP-Paradox Edge Radar ASA - Autonomous Agent Sniffer Lekki...

EUVD-2026-107661

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

EUVD-2026-107664

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the previewdatamanagementpipeline capability or editdatamanagementpipelinejob capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible becaus...

CVE-2026-76290

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

CVE-2026-76287

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the previewdatamanagementpipeline capability or editdatamanagementpipelinejob capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible becaus...

CVE-2026-76290 Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

CVE-2026-76290

Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11 are vulnerable to a Denial of Service (DoS) attack. An unauthenticated user can send repeated requests to the Edge Processor package download endpoint within the Splunk Pipeline Builders app . The root cause is that the endpoint allows ...

CVE-2026-76287

Splunk Enterprise versions prior to 10.4.4 are vulnerable to an authorization bypass in the Data Management REST API . A user with the preview_data_management_pipeline or edit_data_management_pipeline_job capability can read or delete Data Management SPL2 preview jobs and results outside their ow...

CVE-2026-76287 Authorization Bypass in the Data Management REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the previewdatamanagementpipeline capability or editdatamanagementpipelinejob capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible becaus...

WebGL DoS

The vulnerability of WebGL interfaces in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Canvas Component Protected Information Access

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

ANGLE Library Protected Information Access

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML page...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Paint Component Protected Information Access

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

InterestGroups Component Compromise

The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information through a specially created PDF file...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...