EUVD-2026-57382

Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...

CVE-2026-19164

A flaw was found in Codecs in Google Chrome. Insufficient validation of untrusted input in this component could allow a remote attacker to exploit the vulnerability. By crafting a malicious HTML page, an attacker could potentially perform a sandbox escape, leading to the execution of arbitrary co...

CVE-2026-19566

CVE-2026-19566 affects Net::CIDR::Set before v0.23. The vulnerability stems from the encode/width handling of IPv6 prefix lengths, where an unbounded prefix length (including values >128) causes large memory allocations during contains() or add() due to the code creating a mask and unpacking i...

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

Linux Distros Unpatched Vulnerability : CVE-2026-19566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any...

CVE-2026-64934 Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934

CVE-2026-64934 affects the Mira Hormone Monitor ecosystem, specifically the Mira Android App and related cloud API. The root cause is reliance on the firmware version reported by the companion app without independent attestation from the device itself. An authenticated attacker could submit arbit...

CVE-2026-43627

A flaw was found in llama.cpp. An integer overflow vulnerability exists in the llamabatchinit function due to unchecked multiplications during memory allocation. Attackers can provide specially crafted input parameters, leading to heap corruption. This could potentially allow for arbitrary code...

CVE-2026-62917

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...

CVE-2026-73088

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats in node.js, reached unconditionally through getStat and loadStat on every browserslist call, processes untrusted browserslist-stats.json, opts.stats, and...

EUVD-2026-56621

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

CVE-2026-73088 Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats in node.js, reached unconditionally through getStat and loadStat on every browserslist call, processes untrusted browserslist-stats.json, opts.stats, and...

CVE-2026-19169

A flaw was found in Google Chrome. Insufficient validation of untrusted input in Contextual Tasks allows a remote attacker to perform privilege escalation. This can be achieved by enticing a user to visit a crafted HTML page, leading to an attacker gaining elevated permissions within the browser...

CVE-2026-19143

A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...

PT-2026-70184

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 15 Solid Edge SE2026 versions prior to V226.0 Update 7 Description An out of bounds read occurs when the application parses specially crafted PAR files. This flaw could allow an attacker to...

PT-2026-70390

Name of the Vulnerable Software and Affected Versions Visual Studio Code - Python extension affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to bypass a security feature locally...

DEBIAN-CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...