CVE-2026-56331: Generation of Error Message Containing Sensitive Information

Capgo before 12.128.2 contains improper error handling in the /private/acceptinvitation endpoint that returns HTTP 500 instead of safe 4xx errors when magicinvitestring is invalid. Attackers can trigger this vulnerability using only the public key by submitting malformed magicinvitestring values ...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 150.0.7871.47 contain an input validation error vulnerability. This vulnerability stems from an integer overflow issue within the Safe Browsing feature, potentially allowing remote attackers to bypass navigation restrictions via malicious files...

PT-2026-53980

Name of the Vulnerable Software and Affected Versions IBM watsonx.data intelligence versions 5.2.0 through 5.3.0 Description A remote attacker can obtain sensitive information when the system returns detailed technical error messages in the browser. This exposure of internal data could be leverag...

Linux RPC Protocol Heap Buffer Overflow DoS

The vulnerability of the svcrdmacopyInlinerange function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux operating system’s RPC protocol is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker ...

CVE-2026-14057: Origin Validation Error

Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14053: Origin Validation Error

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-13826: Origin Validation Error

Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

OpenBSD input validation error vulnerability

OpenBSD is an open-source, cross-platform BSD-based UNIX-like operating system developed by the OpenBSD Foundation in Canada. Versions of OpenBSD prior to 076e2b1 contained a vulnerability related to input validation errors. This vulnerability stemmed from the fact that the length value in the...

PT-2026-54036

Capgo before 12.128.2 contains improper error handling in the /private/accept invitation endpoint that returns HTTP 500 instead of safe 4xx errors when magic invite string is invalid. Attackers can trigger this vulnerability using only the public key by submitting malformed magic invite string...

Linux kernel alloc_choose_arg_map Heap Buffer Overflow DoS

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 150.0.7871.47 contain an input validation error vulnerability. This vulnerability stems from insufficient trustworthiness checks on input provided by the Sanitizer API, potentially allowing remote attackers to bypass the same-origin policy via specially crafted HTM...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 150.0.7871.47 contain an input validation error vulnerability. This vulnerability stems from insufficient validation of untrusted inputs by the Blink component, potentially allowing remote attackers to bypass the same-origin policy via specially crafted HTML pages...

Apple Safari resource management error vulnerability (CNVD-2026-28246)

Apple Safari is a web browser developed by Apple Inc., primarily providing features for web browsing, content rendering, and network functions integrated with the operating system. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper memory manageme...

CVE-2026-58014: Off-by-one Error

A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundar...

IBM DevOps Deploy configuration error vulnerability

Versions 8.1 through 8.1.2.6 and 8.2 through 8.2.1.0 of IBM DevOps Deploy contain a configuration error vulnerability stemming from the use of Cross-Site Request Forgery CORS. Domains are not restricted to trusted domains, which may allow attackers to perform privileged operations and retrieve...

ROS-20260630-73-0002

The vulnerability of the doTraceNetDevStartXmit function in the include/trace/events/net.h module of the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-50040: Improper Neutralization of Input During Web Page Generation

Storage Concentrator SC & SCVM is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an authenticated user, causes arbitrary script content to execute within the victim's browser...

CVE-2026-13887: Origin Validation Error

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13838: Origin Validation Error

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 150.0.7871.47 contain an input validation error vulnerability. This vulnerability stems from insufficient policy enforcement in the StorageAccessAPI, potentially allowing remote attackers to exfiltrate cross-origin data via specially crafted HTML pages after gainin...