CVE-2026-19141

Google Chrome on Android versions prior to 151.0.7922.109 is vulnerable to a Use after free in Resources (Issue [513602949]). A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to potentially perform a sandbox escape . Remediation...

CVE-2026-19138

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-65574

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

Network Component DoS

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

WebCodecs DoS

The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

XML components DoS

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Data Compromise Component

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

aiohttp HTTP client bypass security

The vulnerability of the aiohttp HTTP client’s request parser is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Skia DoS

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Input component in Google DoS

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...