Lucene search
+L

980 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/05 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-50593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within...

7.3CVSS5.9AI score0.00164EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•3 views

CVE-2026-50593: Integer Underflow (Wrap or Wraparound)

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.3CVSS5.9AI score0.00164EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/05 12:00 a.m.•15 views

CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.3CVSS6.1AI score0.00164EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/18 1:27 p.m.•33 views

GHSA-QW48-84F6-28GV Graphite Has a Pickle Deserialization Vulnerability

Impact Type of vulnerability: Insecure Deserialization via Python's pickle module. Who is impacted: Users of Graphite graph database engine versions before 0.2 who load database files from untrusted or third-party sources. An attacker could craft a malicious database file that executes arbitrary...

7.8CVSS6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/18 1:27 p.m.•46 views

Graphite Has a Pickle Deserialization Vulnerability

Impact Type of vulnerability: Insecure Deserialization via Python's pickle module. Who is impacted: Users of Graphite graph database engine versions before 0.2 who load database files from untrusted or third-party sources. An attacker could craft a malicious database file that executes arbitrary...

6AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/04/29 4:12 p.m.•20 views

OPENSUSE-SU-2026:20654-1 Security update for grafana

This update for grafana fixes the following issues: Changes in grafana: - Update to version 11.6.11: Features and enhancements: Alerting: Add limits for the size of expanded notification templates Correlations: Remove support for orgid=0 Security: CVE-2026-21722: Public dashboards annotations: us...

9.9CVSS6.1AI score0.97007EPSS
SaveExploits22References53
Schneier on Security
Schneier on Security
•added 2026/04/22 11:02 a.m.•18 views

ICE Uses Graphite Spyware

ICE has admitted that it uses spyware from the Israeli company Graphite...

5.7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/17 2:00 p.m.•12 views

Chromium: CVE-2026-6304 Use after free in Graphite

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS7.6AI score0.00304EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/17 12:00 a.m.•14 views

The vulnerability of Google Chrome’s Graphite component, which allows a hacker to bypass the sandboxing protection mechanism

The vulnerability of Google Chrome’s Graphite component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

8.3CVSS7.9AI score0.00304EPSS
SaveExploits0References8Affected Software4
RedhatCVE
RedhatCVE
•added 2026/04/16 2:14 a.m.•12 views

CVE-2026-6304

An use after free flaw was found in the Graphite component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496393742...

9CVSS7.6AI score0.00304EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/15 9:30 p.m.•15 views

EUVD-2026-23050

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS8.4AI score0.00304EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/15 8:16 p.m.•12 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00304EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/15 7:04 p.m.•11 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS8.4AI score0.00304EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/04/15 7:04 p.m.•12 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS8.4AI score0.00304EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/04/15 7:04 p.m.•47 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

0.00304EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/15 7:04 p.m.•8 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.4AI score0.00304EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/15 7:04 p.m.•65 views

CVE-2026-6304

A Use after free vulnerability in the Graphite component of Google Chrome (prior to version 147.0.7727.101 ) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape . The attack can be initiated via a crafted HTML page. Remediation is available in ver...

8.3CVSS8.4AI score0.00304EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/04/15 7:04 p.m.•18 views

CVE-2026-6304

Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS8.4AI score0.00304EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/15 12:00 a.m.•17 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.101 contained a security vulnerability. This vulnerability stemmed from the Graphite component allowing for post-release reuse, which could enable remote attackers who have infiltrated the...

8.3CVSS8AI score0.00304EPSS
SaveExploits0References1
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2026/04/15 12:00 a.m.•44 views

Stable Channel Update for Desktop

The Stable channel has been updated to 147.0.7727.101/102 for Windows/Mac and 147.0.7727.101 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

9.6CVSS7.3AI score0.00555EPSS
SaveExploits3Affected Software1
Rows per page
Query Builder