211908 matches found
CVE-2026-87553
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87553
CVE-2026-87553 is a vulnerability in Google Chrome (and other Chromium-based browsers like Microsoft Edge) caused by improper input validation in the SiteIsolation component. This flaw allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code ...
EUVD-2026-74512
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87542
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87542
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87542
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87542
Google Chrome versions prior to 153.0.8010.36 are vulnerable to a Use after free vulnerability in the Input component. A remote attacker can exploit this flaw by leveraging a crafted HTML page to execute arbitrary code within the sandbox. This vulnerability is also present in Chromium -based brow...
PT-2026-89066
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A user can provide an expression with a string length exceeding the ParserExpressionSizeLimit configured in the CEL environment. This leads to a memory allocati...
Security Advisory 0155
Security Advisory 0155 . CSAF PDF Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-19655 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Scor...
Security Advisory 0167
Security Advisory 0167 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73445 CVSSv3.1 Base Score: 4.9...
ROS-20260909-73-0083
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ROS-20260909-73-0082
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260909-73-0130
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ROS-20260909-73-0170
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ROS-20260909-73-0133
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Linux kernel Input Driver DoS
The vulnerability in the xpadoneprocesspacket function within the drivers/input/joystick/xpad.c file of the Linux kernel input driver is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
msm_iommu_map Heap Buffer Overflow DoS
The vulnerability in the msmiommumap function within the drivers/gpu/drm/msm/msmiommu.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel system is related to improper validation of the function’s return value. Exploitation of this vulnerability may allow an attacker to...
CADRA Node.js zlib DoS
The vulnerability of the zlib module in CADRA’s Node.js software lies in insufficient validation of input data during the processing of the windowBits parameter. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2026-79516: Out-of-bounds Read
An out-of-bounds read in the stbspvsnprintf function stbsprintf.h of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service DoS via sending a crafted input...