344738 matches found
EUVD-2026-69409
Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamfwriter.c component...
PT-2026-84564
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in the FileSystem component allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a...
PT-2026-84558
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description An information leak exists in the MediaCapture component. A remote attacker can potentially leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations...
PT-2026-84544
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Missing authorization in the FileSystem component allows a remote attacker to obtain sensitive information. This occurs when an attacker has already compromised the renderer process and...
PT-2026-84240
Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the informSyncUpgfw function allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves. This is achieved by sending a crafted...
PT-2026-84119
Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704 Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode function of the...
PT-2026-84073
A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...
PT-2026-84559
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue in the Browser component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved...
PT-2026-84556
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in the TabStrip component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already...
PT-2026-84358
Name of the Vulnerable Software and Affected Versions cleverange auth version 0.1.10 Description A remote attacker can cause a denial of service through the account verification function located in the accounts/models.py component. Recommendations At the moment, there is no information about a...
EUVD-2026-69379
Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to restart the cloud update check workflow via sending a crafted MQTT message to the csbroker component...
Mozilla Firefox ESR < 115.40
The version of Firefox ESR installed on the remote Windows host is prior to 115.40. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-83 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbi...
Mozilla Firefox < 155.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-82 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firef...
Mozilla Firefox ESR < 153.2
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-85 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...
CVE-2026-52295
Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamfwriter.c component...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the FilteredObjectInputStream component in the Apache Log4j2 logging library allows a hacker to execute arbitrary code.
The vulnerability of the FilteredObjectInputStream component in the Apache Log4j2 logging library is related to deserialization mechanism flaws. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Key Guard component in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Key Guard component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
MiracleLinux 9 : firefox-140.14.0-1.el9_8.ML.1 (AXSA:2026-1727:22)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1727:22 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the...
Mozilla Thunderbird < 155.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...