PT-2026-81661

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Cache allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fro...

PT-2026-81643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Passwords component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome ...

PT-2026-81824

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Preload mechanism allows a remote attacker to bypass the web origin policy, which is a security measure that restricts how a document or script...

PT-2026-81554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Loader allows a remote attacker to bypass the web origin policy through crafted network traffic. The web origin policy is a security mechanism...

PT-2026-88713

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect reference resolution in Extensions allows a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Recommendations Update Googl...

frontmcp code issue vulnerabilities

FrontMCP is an open-source MCP server development framework based on TypeScript, created by AgentFront. Versions of FrontMCP prior to 2.3.0 had code-related vulnerabilities. These vulnerabilities stemmed from the lack of restrictions on URL reference resolution, which could lead to server-side...

PT-2026-81591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-88647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

CVE-2026-27727

CVE-2026-27727 is confirmed in multiple IBM advisories as affecting the mchange-commons-java library used by IBM Maximo Monitor Component and related IBM products. The vulnerability stems from JNDI dereferencing code in mchange-commons-java, which can allow an attacker to cause download and execu...

PT-2025-37197

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to the BTRFS filesystem. Specifically, the issue involves the potential for transaction aborts during balancing operations when encountering...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

containers-common Library Information Disclosure

The vulnerability of the containers-common library in the Golang programming language is related to improper resolution of references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to confidential information by using symbolic references, by mounting...

PT-2024-7546

Name of the Vulnerable Software and Affected Versions Visual Studio Collector Service affected versions not specified Description The issue is related to an incorrect reference resolution before accessing a file, which can lead to a denial of service. An attacker could exploit this to cause a...

GHSA-CXW4-9QV9-VX5H High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

PT-2019-20039

Name of the Vulnerable Software and Affected Versions CBOR library versions prior to 4.0 Description The CBOR library has a denial of service issue due to the automatic resolution of references in CBOR objects. This can cause a significant increase in memory usage when the decoded CBOR object is...