PT-2026-92418

Name of the Vulnerable Software and Affected Versions za-internet GmbH C-MOR Video Surveillance versions prior to 6.0105 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code. The flaw exists within the ptzpreset.pml and showmovies.pml components when...

PT-2026-92154

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

PT-2026-92161

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description An HTML injection flaw allows a remote attacker to inject malicious HTML code. When viewed, this code is executed in the victim's web browser within the security...

CVE-2026-88618

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

PT-2026-92455

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the...

PT-2026-93143

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An observable discrepancy in CSS allows a remote attacker to leak sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-93154

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue in the DOM Document Object Model allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page...

PT-2026-93163

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue in V8, the open-source high-performance JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the...

PT-2026-93134

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use-after-free issue exists in the Auth component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacke...

PT-2026-93133

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafte...

PT-2026-93127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This occurs when the system incorrectly identifies the data type of an object, which can be leveraged by a remote attacker ...

PT-2026-93158

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in Skia allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Skia is a 2D graphics library used for rendering text and images...

PT-2026-93132

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An observable discrepancy in Fonts allows a remote attacker to leak sensitive information. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML pag...

PT-2026-93156

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Improper input validation in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on top of other graphics APIs, allows a remote attacker to potentially execute arbitrary code...

PT-2026-93149

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the Compositing component. This occurs when the software fails to correctly identify the data type of an object, potentially allowing a remote attacker ...

PT-2026-93144

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.47 Description An out of bounds read exists in WebGL, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. An out of bounds read occurs when a...

ROS-20260915-73-0123

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

PT-2026-93164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An integer overflow in the Compositing component allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Cross-origin data access occurs wh...

PT-2026-93137

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Code injection in XML allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...