EUVD-2026-56984

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-56985

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: High...

EUVD-2026-56986

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-56987

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19559

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19559

CVE-2026-19559 describes a use-after-free in HTML handling in Google Chrome, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software: Google Chrome (Chromium-based). Vulnerable versions are prior to 151.0.7922.137; the security ad...

CVE-2026-19558

The CVE-2026-19558 vulnerability affects Google Chrome extensions and is caused by a use-after-free in the Extensions component. Before version 151.0.7922.137, an attacker convincing a user to install a malicious extension could execute arbitrary code inside Chrome’s sandbox via a crafted extensi...

CVE-2026-19557

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19558

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-19557

CVE-2026-19557 – Google Chrome (macOS) : A use-after-free in the TabStrip component on macOS, prior to version 151.0.7922.137, could allow a remote attacker who already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. The vulnerability is identifi...

CVE-2026-19556

CVE-2026-19556 describes a use-after-free in the V8 engine of Google Chrome, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability affects Chrome prior to version 151.0.7922.137. The description notes a high severity and indicat...

CVE-2026-19556

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An out-of-bounds write in .NET...

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.WebSockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unchecked input for loop condition in...

GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...

EUVD-2026-56846

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction...

CVE-2026-48412

Summary: CVE-2026-48412 affects Adobe Commerce and describes an Incorrect Authorization vulnerability that could enable privilege escalation. An attacker with high privileges could exploit it to gain elevated access to restricted resources, and exploitation does not require user interaction. The ...

CVE-2026-48384

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-32791

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2026-28700

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...