EUVD-2026-66092

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a sandbox escape vulnerability that an attacker can exploit over the network with low privileges and no user interaction. A successful exploit may lead to code execution , privilege escalation , data tampering , and information disclosure . The vulnerability ca...

EUVD-2026-66091

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-78964

A use-after-free vulnerability in the Sync component of Google Chrome on iOS (versions prior to 152.0.7977.65 ) allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rates the severity as Low , yet the CVSS 3.1 base score is 9.6 (Cri...

CVE-2026-78914

CVE-2026-78914 is an uninitialized resource vulnerability in the Skia rendering library within Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page, potentially allowing memory reads inside the Chrome sandbox (information disclosure). Th...

CVE-2026-78915

A race condition in the Enterprise component of Google Chrome on Windows (prior to 152.0.7977.65 ) allows an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. The vulnerability is rated CVSS 7.5 (High) under CVSS 3.1, though Chromium's intern...

EUVD-2026-66084

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78914

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79045

CVE-2026-79045 is a type confusion flaw in the V8 JavaScript engine within Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by luring a user (via social engineering) into visiting a crafted HTML page, allowing memory reads inside the browser sandbox and potential informatio...

CVE-2026-79148

An off-by-one error in the DevTools component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted Chrome extension, to read memory inside the sandbox . Chromium rated this Low severity, while the CNA-assigned CVSS 3.1 score is 9.1...

CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-79045

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79223

CVE-2026-79223 is an integer overflow in Chromium within Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to read memory inside the sandbox by tricking a user into opening a specially crafted file . The Chromium security team rates the severity as Low , while the CNA-assigned CVS...