6786 matches found
DEBIAN-CVE-2026-17950
Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. Chromium security severity: Low...
DEBIAN-CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security flaw in the Safe Browsing component due to insufficient validation of untrusted input . A remote attacker can leverage this to bypass discretionary access control using a malicious file. The vulnerability has been addresse...
EUVD-2026-50748
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17799: Improper Input Validation
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
erlang -- SSH plaintext recovery attack against CBC ciphers
The Erlang/OTP team reports: The SSH client and server now reject incoming packets not aligned to the cipher block size as required by RFC 4253 section 6. For CBC ciphers, a timing-safe "packet discard" mechanism CVE-2008-5161 mitigation ensures structural errors are indistinguishable from MAC...
PT-2026-66118
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Safe Browsing component allows a remote attacker to bypass discretionary access control by using a malicious file. Recommendations Upda...
PT-2026-66558
Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An unauthenticated remote code execution issue exists in the '/load lora adapter from tensors' endpoint. This occurs due to a bypass of the SafeUnpickler's incomplete denylist, which allows an...
safe-chain v1.5.14
Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...
CVE-2026-29509
A flaw was found in Patool. A remote attacker could exploit a path traversal vulnerability in the safeextract function by providing a specially crafted archive. This vulnerability arises because a helper function uses an insecure comparison method, allowing malicious paths to bypass security...
TencentOS Server 4: rsync (TSSA-2026:0743)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0743 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
EUVD-2026-36072
Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape...
SUSE CVE-2026-65704
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...
JLSEC-2026-800 Slow DNS lookups can stall garbage collection process-wide
Reseau 1.0.0 through 1.3.1 perform the blocking system getaddrinfo operation from Julia-adopted resolver threads without marking the foreign call as garbage-collector safe. An attacker who can cause an application to resolve a slow hostname can delay stop-the-world garbage collection for the enti...