6164 matches found
CVE-2026-87467
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87633
A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. The exploitation occurs through user interface UI interaction, leading to a compromise of the system beyond the intended security boundarie...
CVE-2026-87509
Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
EUVD-2026-74464
Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-87509
CVE-2026-87509 is an incorrect authorization vulnerability in the Google Chrome Updater (and Microsoft Edge ) on Windows. A local attacker can exploit this flaw via a local program to execute arbitrary code outside of the browser's security sandbox. The vulnerability has a CVSS v3.1 score of 8.1 ...
CVE-2026-87509
Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-87530
Google Chrome on Windows prior to version 153.0.8010.36 is vulnerable to an uncontrolled search path element in the CredentialProvider component. This flaw allows a local attacker to execute arbitrary code outside the sandbox via a local program. This issue has been addressed in recent Chromium-b...
CVE-2026-87530
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-87554
A race condition in Chromoting within Google Chrome on Windows (prior to version 153.0.8010.36 ) allows a local attacker to execute arbitrary code outside the sandbox via a local program. This vulnerability is associated with CWE-367 (Time-of-check Time-of-use). Impact includes high severity for ...
CVE-2026-87633
Google Chrome (prior to version 153.0.8010.36 ) is vulnerable to a Use after free flaw in Views . This vulnerability allows a local attacker to execute arbitrary code outside the sandbox via UI Interaction . Microsoft Edge, being Chromium-based, is also affected. Remediation includes upgrading to...
Linux Distros Unpatched Vulnerability : CVE-2026-87514
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program...
Linux Distros Unpatched Vulnerability : CVE-2026-87457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a loc...
Linux Distros Unpatched Vulnerability : CVE-2026-87530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code...
PT-2026-88838
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...
PT-2026-88821
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege...
CVE-2026-81192
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
EUVD-2026-44397
Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-81192
"OpenTelemetry.Resources.Host" NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the "host.id" resource attribute detector launches the "sh" and "ioreg" executables by bare name...