WordPress 7.0.1 REST API Batch Route Confusion Remote Code Execution

WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 contain a REST API batch-route confusion issue which, when combined with SQL injection, can lead to remote code execution. https://packetstorm.news/download/237893...

Google Chrome Vulnerability: CVE-2026-118349

Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118352

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Views allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-127267

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-127276

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in WebRTC allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-127266

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.73 Description Improper input validation in the UI allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update...

PT-2026-127279

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the FileAPI allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-127288

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in Skia allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to open a crafted HTML page. Recommendations Update...

PT-2026-127299

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in Skia allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version 156.0.8078....

PT-2026-127301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Paint component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-127304

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in WTF, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use afte...

PT-2026-127303

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the Command component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-127306

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption occurs in the WebAudio component, which may allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML...

PT-2026-127261

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.73 Description Improper input validation in the UI allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update...

Google Chrome Vulnerability: CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118311

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Compositing component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

Google Chrome Vulnerability: CVE-2026-118313

Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Payments component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...