22086 matches found
CVE-2026-16351 Sandbox escape due to use-after-free in the DOM: Navigation component
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
CVE-2026-16351
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 CVSS score: 9.5, a sandbox escape...
EUVD-2026-46126
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
EUVD-2026-46125
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
PT-2026-63242
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An out-of-bounds write in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ANGLE Almost Native...
PT-2026-63245
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An integer overflow occurs in the Chromecast component. This flaw allows a local attacker to potentially achieve a sandbox escape by sending malicious network traffic. A sandbox escape...
PT-2026-63243
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description Insufficient validation of untrusted input in the Chromecast component allows a local attacker to potentially perform a sandbox escape via malicious network traffic. A sandbox escape i...
SUSE SLES12 Security Update : mariadb-connector-c (SUSE-SU-2026:3135-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3135-1 advisory. This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for...
PT-2026-61863
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the DOM: Navigation...
PT-2026-61868
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the Disability Access AP...
PT-2026-61879
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A sandbox escape is possible due to an invalid pointer within the Disability Access APIs component. A sandbox is a security mechanism used to isolate running...
PT-2026-63253
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.182 Description A use-after-free issue exists in the GPU component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A...
PT-2026-63248
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.182 Description An out-of-bounds read and write issue exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This flaw allows a remote attacker to...
PT-2026-61864
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the Disability Access AP...
Google Chrome < 150.0.7871.181 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.181. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0256605430 advisory. - Use after free in GPU in Google Chrome on Android prior to...
Linux Distros Unpatched Vulnerability : CVE-2026-10037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as...
CVE-2026-15899
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-15900
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...