CVE-2026-17707

An uninitialized use flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519701233...

CVE-2026-17934

An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513838421...

CVE-2026-17938

An inappropriate implementation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513989304...

CVE-2026-17904

An insufficient policy enforcement flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497337759...

CVE-2026-17943

An inappropriate implementation flaw was found in the Parser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514424283...

CVE-2026-17920

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513413942...

CVE-2026-17833

An inappropriate implementation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517779123...

CVE-2026-17846

An inappropriate implementation flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518121320...

CVE-2026-17880

An inappropriate implementation flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523229759...

CVE-2026-17871

An inappropriate implementation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521938924...

CVE-2026-17897

An inappropriate implementation flaw was found in the ORB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=527665262...

CVE-2026-17893

An insufficient validation of untrusted input flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524824730...

CVE-2026-17894

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524825209...

CVE-2026-17844

An insufficient validation of untrusted input flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518111542...

CVE-2026-17864

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520494861...

CVE-2026-63559

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk7772zo22...

CVE-2026-68503

creationtimestamp| type| source ---|---|--- 2026-07-30 22:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvguk22nq2w 2026-07-30 22:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh5n5atl23 2026-07-30 23:02:16+00:00| seen|...

CVE-2026-63035

The CVE concerns open62541’s TransferSubscriptions service, where a heap use-after-free could be triggered by an authenticated attacker. The vulnerability may lead to denial of service or arbitrary code execution. The available documents identify the affected component (open62541) and the root ca...

UBUNTU-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

CVE-2026-66418 OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed login POST request, which is recorded verbatim in the audit log. When an...