CVE-2026-113201

A flaw was found in chromium-browser. A memory corruption issue in the Google Lens feature allows a remote attacker to cause an information disclosure by tricking a user into opening a specially crafted HTML page. Successful exploitation enables the attacker to read restricted process memory with...

CVE-2026-113141

A flaw was found in chromium-browser. A use-after-free vulnerability in the Transactions Platform allows a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. This issue occurs when the application accesses memory after it has been release...

PT-2026-120542

Uncontrolled resource consumption in the HTTP/2 h2 receive path of Apache bRPC version 1.18.0 on all platforms allows a remote unauthenticated attacker to crash the server or grow its memory without bound by sending crafted HTTP/2 frames. Root Cause: The h2 parser, enabled by default on every bRP...

PT-2026-120666

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...

PT-2026-120170

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFX MAP SURFACE TO WINDOW PDU with oversized...

Linux Distros Unpatched Vulnerability : CVE-2026-113169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbo...

Linux Distros Unpatched Vulnerability : CVE-2026-113183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

PT-2026-120545

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0 on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra stream id for every additional stream. The response...

Linux Distros Unpatched Vulnerability : CVE-2026-113309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromiu...

PT-2026-120681

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue involving out-of-bounds writes occurs in the software. Out-of-bounds write is a condition where the software writes data past the end, or before the beginning, of the intended buffer...

PT-2026-120702

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A memory management issue exists in the Snort 3 Detection Engine due to incomplete error checking during file processing. This flaw can lead to unreleased memory, which an...

PT-2026-120809

Name of the Vulnerable Software and Affected Versions Algorithm::UrataniTakeda versions 0.1.5 through 0.1.6 Description An issue exists where memory exhaustion can occur due to a failure shift cache in the search process that is never cleared. The failure shift is cached for each pair of trie sta...

Linux Distros Unpatched Vulnerability : CVE-2026-113052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

PT-2026-120660

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.0 Description An attacker can craft a malicious PDF file that leads to excessive memory consumption or extended processing times when an application attempts to retrieve the document's form fields. Recommendations...

Linux Distros Unpatched Vulnerability : CVE-2026-112994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-113184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-113104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

WebGL DoS

The vulnerability of WebGL interfaces in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

PT-2026-120594

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.29 BIND 9 versions 9.21.0 through 9.21.26 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.29-S1 Description Replaying GSS-TSIG signe...