EUVD-2026-34797

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21025

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21025

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

WordPress Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons plugin <= 1.4.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by dodoh4t in WordPress Plugin Chatway Live Chat AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons versions = 1.4.8...

BIT-MLFLOW-2026-2734 Authorization Bypass in SearchModelVersions in mlflow/mlflow

In mlflow/mlflow versions up to 3.9.0, the SearchModelVersions REST API endpoint and the mlflowSearchModelVersions GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registere...

EUVD-2026-34337

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...

PT-2026-46918

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-46926

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 30.0.0.39 Description Improper authorization allows local attackers to access sensitive information. Recommendations Update to version 30.0.0.39 or later...

PT-2026-46915

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

WordPress WP Go Maps – Google Maps, OpenStreetMap, Leaflet Map plugin <= 10.0.09 - Unauthenticated Sensitive Information Disclosure vulnerability

Unauthenticated Sensitive Information Disclosure vulnerability discovered by Sudhanshu Chauhan - RedHunt Labs in WordPress Plugin WP Go Maps versions = 10.0.09...

RIELLO UPS NetMan 访问控制错误漏洞

RIELLO UPS NetMan is a network adapter developed by the Italian company RIELLO UPS. The RIELLO UPS NetMan 204 has a vulnerability related to access control. This vulnerability arises from the lack of authentication for management pages and command endpoints. Unauthenticated remote attackers can...

PT-2026-46916

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information...

ROS-20260605-73-0054

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-47655

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...

CVE-2026-10993

Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11238

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-11196

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. Chromium security severity: Medium...

CVE-2026-11140

CVE-2026-11140 corresponds to an out-of-bounds read in Chromecast within Google Chrome before version 149.0.7827.53. The issue is triggered when a renderer process is compromised and processes a crafted HTML page, allowing a remote attacker to read potentially sensitive information from the proce...

CVE-2026-11096

CVE-2026-11096 details an out-of-bounds read in WebRTC for Google Chrome, prior to 149.0.7827.53. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Affected product/component: WebRTC in Chrome (Chromium-based). Roo...

CVE-2026-11067

CVE-2026-11067 describes an uninitialized use in Dawn within Google Chrome before version 149.0.7827.53. The issue allows a remote attacker to potentially read sensitive information from process memory via a crafted HTML page. The connected sources confirm the vulnerability affects Dawn in Chrome...