Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Payments component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

PT-2026-127257

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption occurs in Turbolev, which may allow a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a specially crafted HTML page...

Google Chrome Vulnerability: CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from PDFium’s reuse after release and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Asterisk path traversal vulnerability

Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3 contain a security vulnerability stemming from authorization bypass in the Asterisk REST Interface ARI. When the Asterisk HTTP web server is enabled and accessible, authenticated attackers with read-on...

Microsoft Edge (Chromium-based): CVE-2026-62765: Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

TencentOS Server 4: php (TSSA-2026:1204)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1204 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146116 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper V8 input validation and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

EPICS Base numeric error vulnerability

EPICS Base Base versions 7.0.10 and earlier contain a numerical error vulnerability. This vulnerability stems from an integer overflow during network request processing, which may result in incorrect memory allocation sizes. Subsequent processing of data provided by attackers could lead to memory...

Asterisk buffer error vulnerability

Versions prior to Asterisk 20.20.1, versions from 21.0.0-pre1 up to 21.12.3, versions from 22.0.0-pre1 up to 22.10.1, versions from 23.0.0-pre1 up to 23.4.1, as well as Certified Asterisk versions prior to 20.7-cert11 and from 22.8-cert1-pre1 up to 22.8-cert3 are affected by a buffer error...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-release reuse issue in Layout, allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-release reuse issue in SVGs, which may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Paint, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the FileAPI, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Compositing component and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Media, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Security Update for Microsoft ASP.NET Core (October OOB 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute...

Security Update for Microsoft .NET Core SDK (October OOB 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Google Chrome input validation error vulnerability

Google Chrome on Android versions prior to 156.0.8078.73 contains an input validation error vulnerability. This vulnerability stems from improper input validation within Core and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...