CVE-2026-78845

Aidot products, specifically the Linkind Matter Smart Plug 1.01.32 , OREiN Matter Smart Light Bulb 3.15.21 , and Linkind Wi-Fi Smart Light Bulb 3.30.17 , are vulnerable to Remote Code Execution (RCE) . The root cause is improper parsing of the UPnP root description . This vulnerability is associa...

PT-2026-127302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Skia allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-127258

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update...

CVE-2026-57198: Heap-based Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...

PT-2026-127264

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption occurs in the Paint component, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to open a specially...

PT-2026-127272

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in V8, the JavaScript engine used by Google Chrome, allows a remote attacker to potentially execute arbitrary code inside the browser security sandbox. This is achieve...

PT-2026-127280

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Compositing allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-127284

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the Headless mode allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update...

PT-2026-127286

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-127289

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Modularization component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially craft...

PT-2026-127298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in Turbolev, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use...

PT-2026-127305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the FileSystem component. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to visit a...

Google Chrome Vulnerability: CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-127297

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the Payments component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...

Juniper Networks RPD Code Execution

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved involves buffer overflow in memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

FreeRDP RDP Client Code Execution

The vulnerability in the licensecheckstreamlength function of the FreeRDP RDP client is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code by sending a specially crafted request...

Google Chrome Vulnerability: CVE-2026-118314

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127283

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 156.0.8078.73 Description Improper input validation in Metrics allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

Planet Technology Planet WGS-804HPT Stack-Based Buffer Overflow (CVE-2024-48871)

PLANET WGS-804HPT is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution. This plugin only works with...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...