CVE-2026-72744

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:05+00:00| seen| https://t.me/GithubRedTeam/101664 2026-09-10 00:00:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101664...

CVE-2026-49887

creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:15+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-49884

creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:13+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21109

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-28663

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:23+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-28655

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:04+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-28611

creationtimestamp| type| source ---|---|--- 2026-09-09 04:46:07+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-12855

creationtimestamp| type| source ---|---|--- 2026-09-09 04:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv2pbpue7o24 2026-09-09 04:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117239200044346852 2026-09-09 05:03:46+00:00| seen|...

CVE-2026-19651

creationtimestamp| type| source ---|---|--- 2026-09-09 04:25:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv2oyduhsy2t...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

CVE-2026-73319

creationtimestamp| type| source ---|---|--- 2026-09-09 04:00:24+00:00| seen| Telegram/H9pq-u-I5XxEZfq-IachOLgi5ZnpVozN0XcBs3PyYc-g 2026-09-10 00:00:53+00:00| published-proof-of-concept| Telegram/H9pq-u-I5XxEZfq-IachOLgi5ZnpVozN0XcBs3PyYc-g...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-15667

creationtimestamp| type| source ---|---|--- 2026-09-09 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv2kaud5lu2b 2026-09-09 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117238846309001976 2026-09-09 03:01:51+00:00| seen|...

CVE-2026-75738

creationtimestamp| type| source ---|---|--- 2026-09-09 02:14:32+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv2hoqo4fu2t...

CVE-2026-87083

A flaw was found in tile-ai tilelang. This vulnerability, located in the Kernel Cache component's KernelCache.loadkernelfromdisk function, allows a remote attacker to perform deserialization. This could lead to various impacts, such as arbitrary code execution or information disclosure, by...

CVE-2026-87501

An ui misrepresentation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513509804...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...