Google Chrome Input Validation Vulnerability (CNVD-2026-26524)

Google Chrome is a cross-platform web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.201 contained a vulnerability related to input validation errors. This vulnerability stemmed from an integer overflow issue in the Mojo component. Attackers could exploit this...

Linux Kernel Memory Error Reference Vulnerability (CNVD-2026-25961)

The Linux kernel is an open-source operating system kernel that provides core functions such as process management, memory management, network protocol stack, and hardware drivers. The Linux kernel has a memory error reference vulnerability. This vulnerability arises from processing MLD queries,...

Dell Container Storage Module OS Command Injection Vulnerability

Dell Container Storage Modules is a container storage management module that primarily provides storage orchestration and data management functions in a containerized environment. Dell Container Storage Modules has an OS command injection vulnerability. This vulnerability stems from the failure t...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-26523)

Google Chrome is a cross-platform web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.201 contained a resource management vulnerability, which stemmed from a reuse issue in AdFilter. Attackers could exploit this vulnerability by using specially crafted HTML pages an...

Linux Kernel TEe Optee Memory Error Reference Vulnerability

The Linux kernel is the core of the Linux operating system, responsible for managing hardware resources and providing system services. The TEE OP-TEE driver in the Linux kernel has a memory error reference vulnerability. This vulnerability arises from the possibility for the client to exit while...

Apache Kerby Kerberos Pre-authentication Bypass Vulnerability

Apache Kerby is a Java implementation of the Kerberos protocol, primarily used for providing authentication and authorization services. Apache Kerby has a vulnerability related to bypassing Kerberos pre-authentication. This vulnerability arises when users send PA-DATA that includes unrecognized o...

GPAC mp4box gf_cenc_set_pssh function buffer overflow vulnerability

GPAC mp4box is a multimedia file processing tool open-sourced by the GPAC team. Version 2.4 of GPAC mp4box contains a buffer overflow vulnerability. This vulnerability stems from the failure of the gfcencsetpssh function located in isomedia/drmsample.c to correctly verify the length of the input...

Oracle Application Development Framework Permission Licensing and Access Control Vulnerabilities

The Oracle Application Development Framework is an application development framework developed by Oracle Corporation in the United States. There were vulnerabilities related to permission licensing and access control in the ADF versions 12.2.1.4.0 and 14.1.2.0.0. These vulnerabilities stemmed fro...

Several network storage devices of Hangzhou Hikvision Digital Technology Co., Ltd. have logical defects and vulnerabilities.

Hangzhou Hikvision Digital Technology Co., Ltd. is a provider of IoT sensing, artificial intelligence, and big data technology services, with a focus on video technologies. Several of Hangzhou Hikvision Digital Technology Co., Ltd.'s network storage devices have logical defects and vulnerabilitie...

Oracle WebCenter Content permission licensing and access control issues

Oracle WebCenter Content is a content management product within Oracle Fusion Middleware. It is primarily used for creating, managing, and publishing corporate content. Oracle WebCenter Content has vulnerabilities related to permission verification and access control. These vulnerabilities stem...

Google Chrome Autofill memory error and reference vulnerability

Google Chrome is a web browser developed by Google. It primarily offers web browsing capabilities, extension support, and cross-platform synchronization features. The Autofill component of Google Chrome has a memory error reference vulnerability. This vulnerability stems from Autofill’s failure t...

Oracle WebCenter Sites permission and access control issue vulnerabilities

Oracle WebCenter Sites is a content management system component within Oracle Fusion Middleware, primarily used for website content management and publishing. There is a security vulnerability in Oracle WebCenter Sites. This vulnerability stems from improper handling of user permission...

Google Chrome Blink memory error reference vulnerability (CNVD-2026-25582)

Google Chrome is a web browser developed by Google, primarily used for browsing web content on the internet. Google Chrome has a memory error reference vulnerability, which stems from the use of memory after it has been released. Attackers can exploit this vulnerability to execute arbitrary code ...

Google Chrome FileSystem memory error reference vulnerability

Google Chrome is a web browser developed by Google. Google Chrome has a memory error reference vulnerability. This vulnerability stems from a memory error reference within the FileSystem component. An attacker can exploit this vulnerability to trigger heap corruption through carefully crafted HTM...

Oracle Unified Directory permission and access control vulnerabilities

Oracle Unified Directory is a unified directory service provided by Oracle Corporation in the United States. Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Unified Directory contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the O...

Oracle VM VirtualBox Permission Licensing and Access Control Vulnerabilities

Oracle VM VirtualBox is one of the virtual machine components developed by Oracle Corporation in the United States. Version 7.2.8 of Oracle VM VirtualBox contains vulnerabilities related to permissions and access control. Attackers can exploit these vulnerabilities to log into virtual machines an...

Google Chrome Blink memory error and reference vulnerability

Google Chrome is a web browser developed by Google, primarily providing web browsing, multimedia support, and additional features. Google Chrome has a memory error reference vulnerability. This vulnerability arises due to the Blink component failing to properly handle object lifecycle issues,...

Google Chrome Bluetooth memory error and reference vulnerability

Google Chrome is a cross-platform web browser developed by Google. It primarily provides features for web browsing, extension support, and multi-platform synchronization. Google Chrome has a memory error reference vulnerability, which stems from the Bluetooth component failing to properly manage...

Google Android Buffer Overflow Vulnerability (CNVD-2026-26528)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There is a buffer overflow vulnerability in Google Android. This vulnerability stems from memory corruption in the NrmmMsgCodec::DecodeUPUTransparentContext function found in the cnNrmmDecoder.cpp file. This can lea...

Google Android DDoS Vulnerability (CNVD-2026-26529)

Android is Google's mobile operating system, used for managing the operation of smartphones, tablets, and embedded devices. Google Android has a denial-of-service vulnerability. The vulnerability arises due to a lack of null pointer checking in the checkSsrcCollisionOnRcv function in...

Dell Wyse Management Suite Trust Management Vulnerability

Dell Wyse Management Suite WMS is a software suite developed by Dell that is used for centralized management of thin client devices. Versions of the Dell Wyse Management Suite prior to 2605 contained a trust management vulnerability, which was caused by the system using default or preset login...

IBM WebSphere Application Server resource management vulnerability (CNVD-2026-29415)

IBM WebSphere Application Server is a Web application execution environment provided by American company IBM. There is a resource management vulnerability in IBM WebSphere Application Server. Attackers can exploit this vulnerability by sending specially crafted requests, causing the server to...

IBM WebSphere Application Server Input Validation Vulnerability (CNVD-2026-29418)

IBM WebSphere Application Server is a Web application execution environment provided by American company IBM. IBM WebSphere Application Server has a vulnerability related to input validation. Attackers can exploit this vulnerability to send specially crafted requests to the application server,...

Google Android Buffer Overflow Vulnerability (CNVD-2026-26526)

Google Android is an operating system based on Linux, open-sourced by Google Inc. Google Android has a buffer overflow vulnerability. This vulnerability stems from the lack of boundary checks in the RtcpHeader::decodeRtcpHeader function, which may lead to out-of-bounds reads, resulting in remote...

IBM TRIRIGA Application Platform Cross-site Scripting Vulnerability

IBM WebSphere Application Server is an enterprise-level application server developed by IBM, used for deploying and managing Java enterprise applications. The IBM TRIRIGA Application Platform has a cross-site scripting vulnerability, which stems from allowing authenticated users to embed arbitrar...

IBM WebSphere Application Server Authorization Vulnerability (CNVD-2026-29417)

IBM WebSphere Application Server is an enterprise-level application server developed by IBM, used for deploying and managing Java enterprise applications. There is an authorization vulnerability in IBM WebSphere Application Server, which stems from inadequate access control mechanisms for JAX-WS...

J-BusinessDirectory SQL Injection Vulnerability

J-BusinessDirectory is a Joomla component used to expand the content and functionality of Joomla sites. J-BusinessDirectory has a SQL injection vulnerability. The vulnerability arises because the categories.getCategories task does not properly filter the SQL statement fragments in the type...

Google Android Out-of-Bounds Write Vulnerability (CNVD-2026-26527)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. There is a buffer overflow vulnerability in Google Android. The cause of this vulnerability lies in the incorrect boundary checking of the Write function in msgtoHostbuffer.cc; it is possible f...

Zhengfang Software Co., Ltd.'s Zhengfang Academic Management System has a vulnerability regarding arbitrary file reading.

Positive Software Co., Ltd. hereinafter referred to as “Positive Company” was established in January 1999. It is a software and high-tech enterprise specialized in consulting, planning, construction, and services in the field of higher education informatization. Positive Software Co., Ltd. has a...

Google Pixel remote code execution vulnerability (CNVD-2026-25583)

The Google Pixel is a Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to a lack of boundary checks in the modem component, allowing unauthorized writing beyo...

Google Android Buffer Overflow Vulnerability (CNVD-2026-25586)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a buffer overflow vulnerability. This vulnerability stems from a lack of boundary checks in the TextRtpPayloadDecoderNode::DecodeT140 function found in TextRtpPayloadDecoderNode.cpp. This...

SQL

The Teaching Management Information Service Platform focuses on cultivation, operation, assurance, and monitoring. It achieves a combination of routine and strategic management of educational affairs, meeting the strategic needs of schools in terms of process management, teaching quality...

Google Pixel remote code execution vulnerability (CNVD-2026-25585)

The Google Pixel is a Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to a lack of boundary checks in the modem component, allowing unauthorized access to...

Google Pixel remote code execution vulnerability (CNVD-2026-25584)

The Google Pixel is an Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to memory corruption in the Modem component during the processing of SIP REFER request...

IBM WebSphere Application Server resource management vulnerability (CNVD-2026-29416)

IBM WebSphere Application Server is an enterprise-level application server developed by IBM, used for deploying and managing Java applications. IBM WebSphere Application Server has a denial-of-service vulnerability, which stems from the sending of specially crafted requests. Attackers can exploit...

RasaGPT has a deserialization vulnerability

RasaGPT is the first headless large language model chatbot platform built on top of Rasa and Langchain. RasaGPT has a deserialization vulnerability, allowing attackers to exploit the vulnerability to execute arbitrary commands and gain server privileges...

Multiple Mozilla product memory error-related vulnerabilities (CNVD-2026-26108)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have memory error exploitation...

Adobe DNG Software Development Kit (SDK) Out-of-Bounds Vulnerability (CNVD-2026-26857)

The Adobe DNG Software Development Kit SDK is a software development toolkit launched by Adobe Inc. The Adobe DNG Software Development Kit SDK has a out-of-bounds read vulnerability; this vulnerability stems from reading data from an out-of-bounds memory buffer. Attackers can exploit this...

Mozilla Firefox for iOS: Input validation error vulnerability (CNVD-2026-26110)

Mozilla Firefox for iOS is a mobile web browser developed by the Mozilla Foundation. Mozilla Firefox for iOS has a vulnerability related to input validation. This vulnerability arises from using partial domain matching when attaching cookies to PDF requests. An attacker can exploit this...

OpenClaw processing logic error vulnerability

OpenClaw is an intelligent artificial assistant open-sourced by the OpenClaw team. OpenClaw has a processing logic vulnerability that attackers can exploit to use tail tokens in derived URLs within models or workpaces, thereby bypassing interception list comparisons. This allows them to use...

Tenda AC7 stack buffer overflow vulnerability (CNVD-2026-32974)

The Tenda AC7 is a 1200m1 11ac dual-band wireless router designed for large households undergoing broadband upgrades and router replacements. The Tenda AC7 has a stack buffer overflow vulnerability. This vulnerability stems from the GoForm/AdvSetMacMtuWan interface failing to correctly verify the...

Microsoft 365 Copilot Command Injection Vulnerability (CNVD-2026-26512)

Microsoft 365 Copilot is an AI assistant integrated into the Microsoft 365 office suite. It offers features such as intelligent writing, data analysis, and content generation. Microsoft 365 Copilot has a command injection vulnerability. This vulnerability arises from the failure to properly...

OpenClaw Limited licensing and access control issues

OpenClaw is an intelligent artificial assistant open-sourced by the OpenClaw team. OpenClaw has vulnerabilities related to limited permissions and access control. Attackers can exploit these vulnerabilities to replay the bootstrap token before it is approved, thereby increasing the paired...

OpenClaw Authorization Issue Vulnerability (CNVD-2026-25113)

OpenClaw is an intelligent artificial assistant open-sourced by the OpenClaw team. OpenClaw has a licensing issue vulnerability, which arises due to a lack of expected allowlist decisions in the shell inline command parsing path. Attackers can exploit this vulnerability to enable authenticated...

Sail Network Co., Ltd.'s Sail Computing Cloud Platform has unauthorized access vulnerabilities

Sail Network Co., Ltd. was established in December 2000. Approved by the Ministry of Education, it is responsible for the operation and management of China’s Educational and Research Computer Network CERNET. The company focuses on the fields of education and research, developing five major busine...

Multiple Mozilla product code execution vulnerabilities (CNVD-2026-26107)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that was separated from the Mozilla Application Suite. Several Mozilla products have code execution vulnerabilities, and...

NVIDIA NeMo Framework arbitrary code execution vulnerability

NVIDIA NeMo Framework is an open-source generative AI development platform designed specifically for researchers and developers. It aims to efficiently build, customize, and deploy large language models, multimodal models, and voice AI models. The NVIDIA NeMo Framework has a code execution...

Adobe DNG Software Development Kit (SDK) Out-of-Bounds Vulnerability (CNVD-2026-26859)

The Adobe DNG Software Development Kit SDK is a software development toolkit launched by Adobe Inc. The Adobe DNG Software Development Kit SDK has a out-of-bounds vulnerability, allowing attackers to access sensitive memory information...

Microsoft Azure Synapse permission licensing and access control issue vulnerabilities

Microsoft Azure Synapse is a cloud data analysis service provided by the American company Microsoft. There are vulnerabilities related to permission licensing and access control in Microsoft Azure Synapse. These vulnerabilities stem from issues with privilege escalation; attackers can exploit the...

OpenClaw input validation error vulnerability (CNVD-2026-26890)

OpenClaw is an intelligent artificial assistant open-sourced by the OpenClaw team. OpenClaw has a vulnerability related to input validation. An attacker can exploit this vulnerability to match allowed list entries based on dialogue metadata rather than a stable sender identity. This allows them t...