EUVD-2026-79958

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91728

CVE-2026-91728 is an integer overflow in V8 , the JavaScript engine used by Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit this flaw by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox . The bug was reporte...

CVE-2023-28753

CVE-2023-28753 Una vulnerabilidad de desbordamiento de enteros que potencialmente conduce a la corrupción de la memoria del heap. Para demostrar la corrupción del heap: compila el servidor ncrx con ASAN root@kitploit: make ./ncrx 31337 cliente adversario root@kitploit: python exploit.py -g | nc -...

CVE-2026-76685

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2026-76685

CVE-2026-76685 affects HPE Networking EdgeConnect SD-WAN Gateways in the proxy packet processing logic , where improper handling of malformed or truncated input triggers an integer overflow that escalates to a buffer overflow . An unauthenticated remote attacker can send specially crafted input t...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55351

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – Desbordamiento de montón en el paquete CONNECT de broker MQTT Código del programa C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; /...

EUVD-2026-78959

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

CVE-2026-56889 is an integer overflow vulnerability in Android (tracked as PUB-A-511556070) that allows a local escalation of privilege to System-level execution. The flaw exists in multiple unspecified locations. Exploitation requires System execution privileges but no user interaction. CNA-assi...

EUVD-2026-78951

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55351

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55351

CVE-2026-55351 affects the VPU (Video Processing Unit) component, as reported by Qualcomm 's CNA (dsap-vuln-management ). The root cause is an integer overflow that leads to an out-of-bounds write , enabling local privilege escalation with low privileges required and no user interaction. The vuln...

CVE-2026-0194

CVE-2026-0194 is a local privilege escalation vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by an integer overflow that permits a permission bypass . No additional execution privileges or user interaction are required for exploitation. The Pixel Update B...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79155

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...