CVE-2026-121229

A memory corruption vulnerability exists in the ANGLE graphics translation layer of Google Chrome on Android prior to version 157.0.8103.38 . A remote attacker can exploit a buffer overflow by providing a crafted HTML page to potentially execute arbitrary code outside the browser sandbox. This is...

CVE-2026-121246

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-121229

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-116498

Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-116500

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-121246

Google Chrome on Android versions prior to 157.0.8103.38 is vulnerable to a Use after free flaw in the WebGL component. A remote attacker could exploit this vulnerability by using a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerability is classif...

CVE-2026-121156

Google Chrome contains a buffer overflow vulnerability in Dawn , the component powering WebGPU . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue affects versions prior to 157.0.8103.38 . Remediation is available in ve...

CVE-2026-115731

The Puppet Server is vulnerable to remote code execution due to the deserialization of untrusted data within its report-processing code. An attacker who possesses a CA-signed agent certificate can execute arbitrary code as the service user by submitting a PUT request containing a crafted rich-dat...

CVE-2026-115731 Report Deserialization Code Execution

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted...

EUVD-2026-116495

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted...

EUVD-2026-116493

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...

CVE-2026-115732

A certificate name authorization bypass exists in trapperkeeper-authorization , a library used by Puppet Server , openvox-server , and openvoxdb . The vulnerability stems from flawed hostname ACL matching where plain strings and wildcard matches are handled by the same logic. This allows a client...

CVE-2026-115732

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...

CVE-2026-115732 Certificate Name Authorization Bypass

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...

CVE-2026-82155

The Dell OS Recovery tool (versions prior to 2.4.4 ) is affected by an Untrusted Search Path vulnerability (CWE-428 ). An unauthenticated attacker with local access could potentially exploit this flaw to achieve Command execution . The high-severity impact (CVSS 3.1 score of 7.8) suggests signifi...

CVE-2026-82155

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-116488

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-116216

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

CVE-2026-95749

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2026-95732

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...