310862 matches found
CVE-2026-65092
NVIDIA OpenShell Sandbox for Linux is affected by a path traversal vulnerability that allows bypassing its L7 REST network policy . An attacker with network access and low privileges can exploit this to achieve information disclosure and data tampering . The CVSS v3.1 base score is 8.5 (HIGH) , w...
CVE-2026-65092
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...
EUVD-2026-66091
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...
CVE-2026-65091
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-65091
NVIDIA OpenShell (all platforms) is affected by an OS command injection vulnerability exploitable through a malicious gateway. A successful exploit could result in code execution, data tampering, and information disclosure . The vendor-assigned CVSS v3.1 score is 8.8 (High) , reflecting a network...
EUVD-2026-66090
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...
CVE-2026-79253
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79126
Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...
CVE-2026-79126
Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...
CVE-2026-79253
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79253
An improper input validation flaw in the Network component of Google Chrome for Windows (versions prior to 152.0.7977.65 ) allows a remote attacker, leveraging social engineering , to leak sensitive information via a crafted HTML page. The CVSS 3.1 score is 6.5 (Medium) with a Chromium internal s...
CVE-2026-79126
CVE-2026-79126 is an incorrect provision of specified functionality in the Proxy component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . An adjacent attacker can exploit this by sending crafted network traffic , potentially obtaining sensitive information . Chromium ra...
CVE-2026-78957
Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. Chromium security severity: Low...
CVE-2026-78957
CVE-2026-78957 is an information leak in Google Chrome Mobile on iOS affecting versions prior to 152.0.7977.65 . A local attacker can obtain sensitive information by supplying a crafted file to the browser. Chromium classifies the severity as Low , with a CVSS 3.1 score of 5.5 (Medium) reflecting...
CVE-2026-79133
Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79179
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79133
Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78981
CVE-2026-78981 is an information leak in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A local attacker can potentially obtain sensitive information via a local program. Chromium rates the severity as Low , while NVD assigns a CVSS 3.1 score of 6.5 (ME...