CVE-2026-7985

Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7974

Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7973

Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7972

Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7965

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7952

Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7948

Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-7948

Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-7948

A race condition in the Chromoting remote administration tool, available for Google Chrome and Microsoft Edge browsers, allows a local attacker to perform privilege escalation on Windows. The vulnerability is caused by synchronization errors when accessing a shared resource, which can be triggere...

CVE-2026-7941

Google Chrome and Microsoft Edge on Android (based on Chromium ) are vulnerable to a User Cross-Site Scripting (UXSS) issue due to insufficient validation of untrusted input. A local attacker can exploit this by using a crafted Chrome Extension to inject arbitrary scripts or HTML. This affects ve...

CVE-2026-7933

Google Chrome versions prior to 148.0.7778.96 are vulnerable to an out-of-bounds read in the WebCodecs component. A remote attacker can exploit this by providing a crafted video file , potentially leading to the disclosure of sensitive information or memory data. The vulnerability has been addres...

open62541:fuzz_mdns_xht: Heap-buffer-overflow in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5056181008924672 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2026-6502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - Unknown description CVE-2026-6502 Note that Nessus relies on the presence of the package as reported by the vendor...

cairo:script_interpreter_fuzzer: Heap-buffer-overflow in _set_line_join

Detailed Report: https://oss-fuzz.com/testcase?key=4693861862801408 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: scriptinterpreterfuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x785d619e03f0 Crash State: setlinejoin...

graphicsmagick:coder_MP4_fuzzer: Use-of-uninitialized-value in parse_sps_for_hvcC_configuration

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5506284966445056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMP4fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

mruby:mruby_fuzzer: Use-of-uninitialized-value in mrb_str_to_dbl

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5397815298949120 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in parse_sps_for_hvcC_configuration

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5894093938163712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

selinux:checkpolicy-fuzzer: Use-of-uninitialized-value in hashtab_map

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5301794527051776 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: checkpolicy-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...