12292 matches found
Astra Linux – Vulnerability in Chromium
Before version 150.0.7871.47, reading content from the Chromecast using Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from the process’s memory through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Integer overflow in Blink in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Omnibox component of Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML through malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in CSS in Google Chrome before version 148.0.7778.96 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in the WebUI of Google Chrome before version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...
Kibana 9.4.3 Security Update (ESA-2026-54)
Unintended Proxy or Intermediary 'Confused Deputy' in Kibana Leading to Unauthorized Information Exposure Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under...
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SMTP client System.Net.Mail. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A spoofing vulnerability exis...
cairo:font_fuzzer: Heap-buffer-overflow in find_name
Detailed Report: https://oss-fuzz.com/testcase?key=6271844181934080 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: fontfuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x79588dfe07b2 Crash State: findname cairotruetypereadfontnam...
Linux Distros Unpatched Vulnerability : CVE-2026-46571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential...
CVE-2026-15778
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-15778
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
binutils:fuzz_readelf: Heap-buffer-overflow in process_object
Detailed Report: https://oss-fuzz.com/testcase?key=6444533920104448 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzreadelf Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x74d201de11f8 Crash State: processobject processarchi...
CVE-2026-53653 Grav: Unauthenticated denial of service via unbounded image derivative dimensions
Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust server memory and CPU by requesting image derivatives with oversized dimensions through URL query image actions such as forceResize in Grav::fallbackUrl, which passes request...
vuln-chain-3-4-14-demo
vuln-chain-spring-boot — a Trivy "green but owned" demo An in...
EUVD-2026-42460
Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
PT-2026-56681
Name of the Vulnerable Software and Affected Versions async-tar versions 0.6.0 and earlier Description async-tar mis-applies a buffered PAX size extension to an intermediary extension header such as a GNU longname L, a GNU longlink K, or a PAX x/g header instead of applying it to the subsequent...
