Lucene search
+L

7349 matches found

Mend
Mend
•added 2026/08/25 3:16 p.m.•6 views

CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

8.7CVSS5.8AI score0.00306EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/25 12:45 a.m.•49 views

CVE-2026-59183

CVE-2026-59183 affects OpenEXR , the reference implementation for the EXR image format widely used in the motion picture industry. The vulnerability is a signed int32_t multiplication overflow in OpenEXRCore's unpack_sample_table() function, triggered while decoding a crafted deep tiled EXR file ...

5.5CVSS5.8AI score0.00172EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•2 views

CVE-2026-78914: Use of Uninitialized Resource

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.8AI score0.00274EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•2 views

CVE-2026-79045: Access of Resource Using Incompatible Type

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS7.7AI score0.00376EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•4 views

CVE-2026-79020: Out-of-bounds Read

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

8.1CVSS7.6AI score0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•3 views

CVE-2026-79007: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS6AI score0.00251EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81590

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81544

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Skia is a 2D graphics library used for rendering...

6.5CVSS6.8AI score0.00274EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory...

6.5CVSS6.6AI score0.00251EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81663

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper state validation in the Performance component allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81829

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to read...

6.5CVSS6.8AI score0.0039EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•16 views

PT-2026-81639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in the V8 engine. A remote attacker can use social engineering to lure a user to a crafted HTML page, enabling the attacker to read memory within the...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81580

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the Video component allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. Recommendations Update Google Chrome ...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted media file. Recommendations...

8.1CVSS7.5AI score0.00368EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81584

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome...

9.6CVSS6.7AI score0.0056EPSS
SaveExploits1References335
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•10 views

EulerOS Virtualization 2.13.1 : glibc (EulerOS-SA-2026-3172)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the...

7.3CVSS7AI score0.00444EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•3 views

CVE-2026-79072: Improper Check for Unusual or Exceptional Conditions

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.1CVSS7.7AI score0.00327EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•7 views

CVE-2026-79769: Access of Resource Using Incompatible Type

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

8.7CVSS5.8AI score0.00306EPSS
SaveExploits0References2
Rows per page
Query Builder