CVE-2026-79221: Use of Uninitialized Resource

Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79148: Off-by-one Error

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79040: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78977: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-81726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An off-by-one error in DevTools allows a remote attacker to potentially read memory inside the sandbox. This issue can be exploited through social engineering using a crafted Chrome...

PT-2026-81783

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in Chromium, which allows a remote attacker to read memory within the sandbox by using a specially crafted file. Recommendations Update Google Chrome to versi...

PT-2026-81799

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read exists in Tint, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs...

EulerOS Virtualization 2.13.0 : glibc (EulerOS-SA-2026-3212)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the...

EulerOS Virtualization 2.13.1 : glibc (EulerOS-SA-2026-3172)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the...

V8-sandbox-escape-PoC-

V8 Sandbox Escape PoC ⚠️ CRITICAL SECURITY WARNING ⚠️...

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...

ROS-20260824-73-0006

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the fs/erofs/fileio.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/erofs/fileio.c component of the Linux operating system relates to reading data from memory beyond its permitted limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

CVE-2026-77237 Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237: Access of Resource Using Incompatible Type

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...

OESA-2026-3467 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg versions from 3....