CVE-2026-11163

Google Chrome on Android prior to version 149.0.7827.53 is vulnerable to a use after free flaw in Messages . A remote attacker could potentially perform a sandbox escape by interacting with a crafted HTML page. While technical details regarding the specific root cause are not provided in the docu...

CVE-2025-8873

CVE-2025-8873 affects Arista EOS with IPsec enabled: a specially crafted packet can stop dataplane processing of all IPsec traffic, with control plane detecting and resetting the IPsec pipeline; after reset, IPsec traffic may not resume. Non-IPsec traffic is unaffected. Affected EOS releases incl...

CVE-2026-11056

Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11009

A use after free vulnerability in the USB component of Google Chrome on Windows (prior to version 149.0.7827.53 ) allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is categorized as a Medium security severity by Chromium. No specific explo...

CVE-2026-10999

Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10961

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10959

Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10958

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-10950

Google Chrome on iOS prior to version 149.0.7827.53 is vulnerable to insufficient policy enforcement within the Autofill component. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability is associated with CWE-693 (Prot...

CVE-2026-10944

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-10915

A Use after free vulnerability exists in the Core component of Google Chrome on iOS (prior to version 149.0.7827.53 ). A remote attacker who has already compromised the renderer process could exploit this flaw using a crafted HTML page to potentially achieve a sandbox escape . While the vulnerabi...

CVE-2026-10896

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10896

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-6858

creationtimestamp| type| source ---|---|--- 2026-06-04 22:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipigspj72x...

GHSA-9392-PJ54-QQF8

creationtimestamp| type| source ---|---|--- 2026-06-04 19:40:55+00:00| seen| https://gist.github.com/alon710/8d83dcf8c5f6eaceac335292cf54a077 2026-06-04 19:50:59+00:00| seen| https://gist.github.com/alon710/94ad07ac90371ecb50e3be0d7c9cdb9e...

Open Redirect

Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Open Redirect via the GET /api/oauth/sso/auth endpoint when the expected SSO session state is missing, causing the application to use the request's Referer header as the redirect...

Open Redirect

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Open Redirect via the GET /api/oauth/sso/auth endpoint when the expected SSO session state is missing, causing the application to use the request's...

CVE-2026-48480

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptographically-signed final chunk was received before the outer HTTP body terminates. An on-path adversar...

CVE-2026-48480

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptographically-signed final chunk was received before the outer HTTP body terminates. An on-path adversar...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.67 security and extras update

Red Hat OpenShift Container Platform release 4.13.67 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...