Lucene search
+L

5021 matches found

OSV
OSV
added 2026/07/30 1:16 a.m.7 views

DEBIAN-CVE-2026-17918

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.3AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 12:25 a.m.8 views

EUVD-2026-50667

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.3AI score0.00303EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 12:25 a.m.50 views

CVE-2026-17918

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

0.00303EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/30 12:25 a.m.43 views

CVE-2026-17918

The CVE-2026-17918 entry refers to a Use-After-Free in Sync within Google Chrome, fixed in versions before 151.0.7922.72 (i.e., patched in 151.0.7922.72). The vulnerability allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected component: Ch...

8.8CVSS6.3AI score0.00303EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/07/30 12:25 a.m.8 views

CVE-2026-17918

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.3AI score0.00303EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.18 views

PT-2026-66462

Name of the Vulnerable Software and Affected Versions FuseWP versions prior to 1.1.24.3 Description The FuseWP plugin for WordPress contains a Cross-Site Request Forgery CSRF flaw, which occurs when a web application fails to verify that a request was intentionally initiated by the user. This iss...

4.3CVSS5.2AI score0.00132EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-17918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS5.9AI score0.00303EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-58041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement...

5.3CVSS5.9AI score0.0032EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.16 views

PT-2026-66237

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

9.6CVSS6.3AI score0.00442EPSS
SaveExploits0References376
EUVD
EUVD
added 2026/07/29 4:29 p.m.24 views

EUVD-2026-43723

Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync...

3.1CVSS5.8AI score0.00129EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/29 9:6 a.m.11 views

EUVD-2026-50235

Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the peer decoder and corrupts subsequent header blocks on the connection. This issue affects Apache Traffic Server: from...

6.3CVSS5.8AI score0.00449EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/07/28 9:20 p.m.7 views

WordPress FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin <= 1.1.24.2 - Cross-Site Request Forgery to Sync Rule Status Toggle vulnerability

Cross-Site Request Forgery to Sync Rule Status Toggle vulnerability discovered by Deadbee in WordPress Plugin FuseWP versions = 1.1.24.2...

4.3CVSS5.8AI score0.00132EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/27 3:32 p.m.6 views

GO-2026-6083 Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim in gitea.dev

Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim in gitea.dev...

3.1CVSS5.8AI score0.00229EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/27 6:22 a.m.11 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or f...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 3:45 a.m.11 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or f...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 3:33 a.m.9 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 3:22 a.m.7 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or f...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 3:22 a.m.18 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 2:33 a.m.14 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or f...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/07/25 3:59 p.m.10 views

SUSE CVE-2026-64405

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

5.8AI score0.00173EPSS
SaveExploits0References3
Rows per page
Query Builder