CVE-2026-17769

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security issue caused by insufficient validation of untrusted input in Cast . A remote attacker can exploit this by using a crafted HTML page to leak cross-origin data . The Chromium security severity is rated as Medium . No specif...

CVE-2026-17706

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-65676

The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the save requests meta function applying only sanitize text field to the user role set POST parameter before passing it directly to WP User::add rol...

chromium -- security fixes

Chrome Releases reports: This update includes 370 security fixes: 514442821 Critical CVE-2026-17650: Use after free in Compositing. 517307966 Critical CVE-2026-17651: Insufficient validation of untrusted input in Dawn. 519262990 Critical CVE-2026-17652: Use after free in Views. 520514458 Critical...

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MRF files...

CVE-2026-13806

An insufficient validation of untrusted input flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503333798...

CVE-2026-13824

An insufficient validation of untrusted input flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513177497...

CVE-2026-13875

An insufficient validation of untrusted input flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498721671...

CVE-2026-13921

An insufficient validation of untrusted input flaw was found in the DeviceBoundSessionCredentials component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511738175...

CVE-2026-13928

An insufficient validation of untrusted input flaw was found in the Enterprise component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512162479...

CVE-2026-13927

An insufficient validation of untrusted input flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511826446...

CVE-2026-13901

An insufficient validation of untrusted input flaw was found in the Serial component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503585173...

CVE-2026-13929

An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512249559...

CVE-2026-14038

An insufficient validation of untrusted input flaw was found in the New Tab Page component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497241148...

CVE-2026-14045

An insufficient validation of untrusted input flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497723649...

CVE-2026-14095

An insufficient validation of untrusted input flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513271007...

CVE-2026-14089

An insufficient validation of untrusted input flaw was found in the PopupBlocker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513188254...

CVE-2026-14411

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513919827...

CVE-2026-18029 Insufficient validation of payment status in pretix-girosolution

Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted...