PT-2026-127269

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in HTML allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-127275

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the Media component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-127282

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in ImageCapture, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. U...

PT-2026-127291

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the ReadingList component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML pag...

PT-2026-127296

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Skia allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-127307

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the V8 engine allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to open a crafted HTML page. Recommendations...

Google Chrome Vulnerability: CVE-2026-118351

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127263

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the Media component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page...

Google Chrome Vulnerability: CVE-2026-118316

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-114595: Integer Overflow or Wraparound

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution...

Oracle E-Business Suite 12.2.15 SQL Injection

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...

PT-2026-127859

Name of the Vulnerable Software and Affected Versions Contact Manager versions prior to 9.1.3 Description An arbitrary file upload issue exists in the add message function. This occurs because an incomplete extension blacklist fails to detect dangerous extensions when a trailing dot causes the...

PHP 8.5.11 Session Upload Progress Remote Code Execution

PHP versions through 8.5.11 contain session.uploadprogress OOM-corruption and stale-global-state vulnerabilities that can lead to remote code execution. Included is a proof of concept with passive fingerprinting and local Docker lab support. https://packetstorm.news/download/237904...

Google Chrome Vulnerability: CVE-2026-118328

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118350

Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118357

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-126695

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chan sip channel...

CVE-2026-83831: Double Free

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Google Chrome Vulnerability: CVE-2026-118358

Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-126621

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client for Linux and macOS versions prior to 15.83 Description An out-of-bounds write issue exists in the screen-image decoder. This occurs due to missing destination bounds checking in the decoder, which allows crafted...