Lucene search
+L

679 matches found

Cvelist
Cvelist
added 2026/04/01 4:41 a.m.29 views

CVE-2026-5278

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

0.00407EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/01 4:41 a.m.6 views

CVE-2026-5278

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00407EPSS
SaveExploits0
CVE
CVE
added 2026/04/01 4:41 a.m.29 views

CVE-2026-5278

CVE-2026-5278: A use-after-free vulnerability in the Web MIDI component of Google Chrome on Android (prior to 146.0.7680.178) could allow remote code execution via a crafted HTML page. Affected product/area: Web MIDI in Chrome for Android; root cause: use-after-free in Web MIDI handling. Impact: ...

8.8CVSS6.2AI score0.00407EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.5 views

PT-2026-29456

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use-after-free issue exists in the Web MIDI component of Google Chrome on Android. A remote attacker can potentially execute arbitrary code by tricking a user into visiting a special...

9.6CVSS6.5AI score0.05036EPSS
SaveExploits0References29
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-5278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

8.8CVSS7.3AI score0.00407EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2026/03/31 12:0 a.m.6 views

KLA90963 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in CSS can be exploited to cause denial of service or execute...

9.6CVSS6.5AI score0.05036EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2026/03/31 12:0 a.m.12 views

chromium -- security fixes

Chrome Releases reports: This update includes 21 security fixes: 493952652 High CVE-2026-5273: Use after free in CSS. Reported by Anonymous on 2026-03-18 491732188 High CVE-2026-5272: Heap buffer overflow in GPU. Reported by inspector-ambitious on 2026-03-11 488596746 High CVE-2026-5274: Integer...

9.6CVSS6.2AI score0.05036EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.13 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 146.0.7680.178. The vulnerability stems from a confusion in the instructions responsible for freeing memory in the Web MIDI component. An attacker coul...

8.8CVSS6.2AI score0.00407EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/03/11 10:4 p.m.6 views

CVE-2026-3923

Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2026/03/10 12:0 a.m.11 views

KLA90934 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in WebML can be exploited to cause...

9.6CVSS7.6AI score0.00417EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.8 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.10 views

EUVD-2026-9777

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.9AI score0.00327EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.8 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.18 views

CVE-2026-28125

CVE-2026-28125 is a Local File Inclusion vulnerability in the WordPress Midi theme (Midi plugin by AncoraThemes). The issue arises from improper validation of filenames used in PHP Include/Require, enabling potential PHP Local File Inclusion. Affected software is Midi versions from unspecified st...

8.1CVSS5.9AI score0.00327EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.7 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.9AI score0.00327EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.6 views

CVE-2026-28125 WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

5.9AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.46 views

CVE-2026-28125 WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.14 views

PT-2026-23397

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

5.9AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.9 views

WordPress plugin Midi 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/27 1:36 p.m.12 views

OPENSUSE-SU-2026:20291-1 Security update for fluidsynth

This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file bsc1256435...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits1References2
Rows per page
Query Builder