116888 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-17895
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI...
CVE-2026-17674: Protection Mechanism Failure
Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-17730: Improper Protection of Physical Side Channels
Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11897: Allocation of Resources Without Limits or Throttling
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
PT-2026-66210
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description A use after free issue exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. A remote attacker who has already compromised the...
CVE-2026-17934: Improper Input Validation
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-10842: Authentication Bypass by Alternate Name
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints...
CVE-2026-17759: Use of Uninitialized Variable
Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66111
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...
PT-2026-66118
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Safe Browsing component allows a remote attacker to bypass discretionary access control by using a malicious file. Recommendations Upda...
PT-2026-66121
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description A side-channel information leakage issue in the GPU allows a remote attacker to leak cross-origin data by using a crafted HTML page. Side-channel attacks involve extracting...
PT-2026-66122
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Save to Drive feature allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape...
PT-2026-66125
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Extensions allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag...
PT-2026-66160
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description A race condition in the browser allows a remote attacker to perform UI spoofing by using a specially crafted HTML page. UI spoofing is a technique where the user interface is...
PT-2026-66195
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Payments component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page,...
PT-2026-66280
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the Session component allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Googl...
PT-2026-66302
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Global Media Controls allows a remote attacker to perform UI spoofing via a crafted HTML page. Recommendations Update Google Chrome to version...
PT-2026-66332
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An inappropriate implementation in the browser allows a remote attacker to perform UI spoofing, a technique used to trick users by mimicking a legitimate user interface, via a...
PT-2026-66071
Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A use after free issue exists in Views, which could allow a remote attacker to cause heap corruption through a specially crafted HTML page. Use after free is a memory corruption...
PT-2026-65988
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An inappropriate implementation in the software allows a remote attacker to potentially perform a sandbox escape—a process of breaking out of the restricted environment where cod...