CVE-2026-54511

@logtape/syslog (part of LogTape, a Node.js logging library) contains two related output-encoding bugs in its structured-data formatting, affecting versions prior to 1.3.11 , 2.0.14 , and 2.1.5 when includeStructuredData is set to true (non-default). The escapeStructuredDataValue() function fails...

CVE-2026-79072

A flaw was found in Google Chrome. A remote attacker could exploit improper state validation in the Performance component by crafting a malicious HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure...

CVE-2026-79066

An improper input validation flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511736672...

CVE-2026-79065

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to...

CVE-2026-79008

A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...

CVE-2026-79013

An improper input validation flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513737209...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

CVE-2026-78900

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to craft a malicious HTML page. When processed, this page can lead to arbitrary code execution outside the browser's security sandbox, potentially compromising the user's system...

CVE-2026-79230

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

CVE-2026-79203

An improper input validation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532182486...

CVE-2026-79182

A flaw was found in Media in Google Chrome. Improper input validation could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...

CVE-2026-79139

A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...

CVE-2026-79121

A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...

CVE-2026-79111

A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79076

A flaw was found in chromium-browser. Improper input validation within the Sync component of Google Chrome allows a remote attacker to obtain sensitive information. This vulnerability can be exploited by sending specially crafted network traffic...

CVE-2026-79073

A flaw was found in the Parser component of Google Chrome. This vulnerability, caused by improper state validation, allows a remote attacker to potentially execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page. This coul...

CVE-2026-54523 Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library to matchConditions, allowing a namespace-scoped policy to invoke generator.applynamespace, resources with an arbitrary...

CVE-2026-12717

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

GHSA-6753-GR46-6WPR Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS

Summary Affected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...

CVE-2026-54553 Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS

Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications. Prior to 0.16.1, the list API does not validate user-supplied orderby and structured where field names against the configured sortablefields and searchablefields...