8004 matches found
CVE-2026-79255
A flaw was found in WebRTC, a real-time communication component within Chromium. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by tricking the user into visiting...
CVE-2026-79008
A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...
CVE-2026-78943
A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...
CVE-2026-79121
A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...
CVE-2026-12717
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
CVE-2026-77554
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
CVE-2026-77552
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...
CVE-2026-77547
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77554
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
CVE-2026-77552
UniFi Enterprise Audio/Video Bridge (by Ubiquiti) is affected by an Improper Input Validation vulnerability that allows a network-accessible malicious actor to execute a Command Injection on the device. The flaw requires no authentication or user interaction, yielding a CVSS 3.1 score of 9.8 (CRI...
CVE-2026-77552
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...
CVE-2026-77548
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77547
CVE-2026-77547 affects the UniFi Access Application (CNA: Ubiquiti). An Improper Input Validation flaw allows a network-based attacker with low privileges to achieve Command Injection on the host device, rated CVSS 9.9 (Critical) with changed scope and high impact across confidentiality, integrit...
CVE-2026-77546
UniFi Access Application is affected by an Improper Input Validation flaw that allows a low-privileged actor with network access to execute Command Injection on the host device. The CNA-assigned CVSS v3.1 score is 9.9 (CRITICAL) with a changed scope and high impact across confidentiality, integri...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77543
An Improper Input Validation vulnerability in the UniFi Access Application (Ubiquiti) allows a network-adjacent actor with low privileges to achieve command injection on the host device, rated CVSS 9.9 (Critical) with changed scope. The attack requires no user interaction and has low complexity. ...
CVE-2026-77542
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...
CVE-2026-77540
CVE-2026-77540 is a CRITICAL (CVSS 9.1) vulnerability in UniFi OS Server by Ubiquiti, caused by Improper Input Validation that allows a privileged network attacker to achieve Command Injection on the host device. The attack requires high privileges and no user interaction, with changed scope impa...