CVE-2026-79083

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-79020

CVE-2026-79020 is an out-of-bounds read vulnerability in Skia , the 2D graphics library used in Google Chrome and other Chromium-based browsers (including Microsoft Edge ). A remote attacker can exploit it by luring a user into processing a crafted media file , potentially allowing memory read wi...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome (Chromium) prior to 152.0.7977.65 , allowing a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rates this as Medium severity, while...

CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78900

CVE-2026-78900 is an improper input validation flaw in the Media component of Google Chrome (prior to 152.0.7977.65 ). A remote attacker can craft a malicious HTML page that, when processed by the browser, may lead to arbitrary code execution outside the sandbox , potentially compromising the use...

CVE-2026-78900

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78900

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78379

creationtimestamp| type| source ---|---|--- 2026-08-25 20:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmovwkty2m 2026-08-26 01:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx5kkus2g2p 2026-08-26 14:47:54+00:00| seen|...

CVE-2022-50998

creationtimestamp| type| source ---|---|--- 2026-08-25 18:54:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwilrryzn2j...

CVE-2026-55419

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

CVE-2024-58378

creationtimestamp| type| source ---|---|--- 2026-08-25 18:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxkocp42c...

reachy_mini Allows Unrestricted Upload of File with Dangerous Type

Summary The Reachy Mini daemon exposes the “/api/media/sounds/upload” endpoint without authentication and file validation mechanisms. An attacker can use this endpoint to upload malicious files into the file system that will propagate in future attacks. Compromise Chain: Unauthenticated to Full...

CVE-2026-55419 Reachy Mini: Unrestricted Upload of File with Dangerous Type

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

CVE-2026-55419 Reachy Mini: Unrestricted Upload of File with Dangerous Type

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

EUVD-2026-42395

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...

CVE-2026-55541

creationtimestamp| type| source ---|---|--- 2026-08-25 15:20:58+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtw4n5te3z2v 2026-08-25 16:35:26+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvxx-r596-f5qj 2026-08-26...

CVE-2026-57909

creationtimestamp| type| source ---|---|--- 2026-08-25 12:32:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aeuy6oq4crqre 2026-08-25 14:07:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117156532819331041 2026-08-25 14:07:30+00:00| seen|...