CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SkeletonKey

CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...

MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

MAL-2026-15645 Malicious code in kisama-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3 [email protected] ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec POST for shell...

Malicious code in 3layerdipstacko8li9w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886025a6437b781a80821d6f113c08dea138ee45899438c19bf9e7cf3e366c5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackhyazlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6790afda3bc2af3e8b5fbb3e3636c02767986b5f7b7bd3b7bc25585c6139d19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14861 Malicious code in 3layerdipstackoms1fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97713fb02abd28ed8ae39bdff7b71df1f21f6e8f835baf5f074bbe05984808 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackihi1o9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a901824681511a2e113ac8f970984a35b6e042d971695d8933f0a44f58442 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackpbkfvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac98f9b55c50aa9a9653e461c8e6d658cc00729a6ac777b87fd4647d6c2a165 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14749 Malicious code in 3layerdipstackfdgka0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b1e8e507446d2e1921511d47721fa25899b90432339713bbaac218908d68b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14740 Malicious code in 3layerdipstackelcuhp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13b3a8a98b196d368a547d115510504e1a70d7d0235125cee48cc81dbef936 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackds3oln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1497135f91ba31b1cc557c7a3b42aa6fdb7baf359f42a12d64ba790205f024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14602 Malicious code in 3layerdipstack1g5cxo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed95dd89d1a5daf491b1350b3cd65fb73e19a50ef66848b5a86ffdba77ba6205 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14944 Malicious code in 3layerdipstackuew4bh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f693f3775d167495f7080e39f299df6fb4cc1e282f79718d712fcca91076e82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2026-78935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsid...