Google Chrome buffer overflow vulnerability (CNVD-2026-27209)

Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a buffer error vulnerability. The vulnerability arises due to a memory access flaw in the ANGLE component, which leads to out-of-bounds memory reads and writes during processing graphic...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27211)

Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a resource management vulnerability. The vulnerability arises from the DevTools component incorrectly using released memory when handling the lifecycle of debugging objects. Attackers can...

IBM Watsonx.Data Intelligence Server Request Forgery Vulnerability (CNVD-2026-28621)

IBM WatsonXData Intelligence is a data management and analysis platform provided by American company IBM. IBM WatsonX.Data Intelligence has a server-side request forgeing vulnerability. This vulnerability arises from the lack of sufficient verification mechanisms on the server to confirm the orig...

Adobe ColdFusion input validation error vulnerability (CNVD-2026-26850)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to input validation, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Adobe ColdFusion arbitrary file upload vulnerability (CNVD-2026-26852)

Adobe ColdFusion is a rapid web application development platform provided by Adobe, Inc. ColdFusion has a vulnerability related to arbitrary file uploads. This vulnerability stems from improper file upload restrictions, and attackers can exploit this vulnerability to execute arbitrary code within...

Adobe ColdFusion arbitrary file upload vulnerability

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to arbitrary file uploads. This vulnerability stems from the upload of dangerous types of files without restrictions, allowing attackers to execute...

Adobe ColdFusion path traversal vulnerability (CNVD-2026-26845)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a path traversal vulnerability, which stems from improper path name filtering. Attackers can exploit this vulnerability to access files and directories that are not intend...

Adobe ColdFusion path traversal vulnerability (CNVD-2026-26849)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a path traversal vulnerability; this vulnerability stems from path traversal issues, and attackers can exploit it to execute arbitrary code within the context of the curre...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27218)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the Dawn component on the Mac platform, where objects continue to be used after being released. Attackers...

Adobe ColdFusion input validation error vulnerability (CNVD-2026-26851)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to input validation, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Google Chrome heap buffer overflow vulnerability (CNVD-2026-27215)

Google Chrome is a web browser used for accessing web pages and running web applications. Google Chrome has a heap buffer overflow vulnerability. This vulnerability arises due to a flaw in the Skia component that leads to heap buffer overflows. Attackers can exploit this vulnerability to escape t...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27214)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine, where objects continue to be used after being released. Attackers can exploit this...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27217)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the ANGLE component, where objects continue to be used after being released. Attackers can exploit this...

Google Chrome Input Validation Vulnerability (CNVD-2026-26945)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a vulnerability in Google Chrome’s input validation mechanism. The vulnerability stems from memory processing defects in the V8 engine. Attackers can exploit this vulnerability by constructing HTML...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27216)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine that allows objects to be reclaimed and then reused after their release. Attackers can...

Beijing StarNet Jet Networks Technology Co., Ltd.'s ASME access shared management engine has a command execution vulnerability.

ASME Access Shared Management Engine is a proxy prevention product based on DPI application layer detection. Beijing Starnet Netcom Technology Co., Ltd.'s ASME Access Shared Management Engine has a command execution vulnerability, allowing attackers to execute arbitrary commands using this...

Apache ActiveMQ authorization issue vulnerability (CNVD-2026-28240)

Apache ActiveMQ is a message queue middleware product developed by the Apache Foundation. There is an authorization issue in Apache ActiveMQ; this vulnerability stems from improper authorization practices. As a result, low-privilege Web Console users who are authenticated may have access to the...

Siemens Mendix Studio Pro arbitrary code execution vulnerability

Mendix Studio Pro is a low-code IDE designed for professional developers. It is a visual model-driven development environment used to build applications on the Mendix platform. Siemens Mendix Studio Pro has a vulnerability where arbitrary code can be executed. Attackers can exploit this...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28242)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises because the size value in the WireFormatInfo frame is not verified during the authenticati...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28243)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises due to the lack of validation of the encoding size values during the deserialization of...

Tenda JD12L buffer overflow vulnerability

JD12L is a Tenda wireless router device, used for home and small network access. The Tenda JD12L has a buffer overflow vulnerability. This vulnerability arises due to the lack of length validation for the security5g parameter in the formWifiBasicSet function of the /goform/WifiBasicSet interface...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28241)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises due to the STOMP NIO codec’s ability to infinitely buffer unterminated header bytes...

Tenda jd12l stack buffer overflow vulnerability (CNVD-2026-32968)

The Tenda jd12l is a multi-antenna wireless router designed for home users. The Tenda jd12l has a stack buffer overflow vulnerability. This vulnerability stems from the fromNatStaticSetting function in the goform/NatStaticSetting file, which fails to properly validate the page parameter. Attacker...

Apple Safari resource management error vulnerability (CNVD-2026-28250)

Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing internet pages and rendering web content. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to memory-related errors. Attackers can exploit this...

Apple Safari resource management error vulnerability (CNVD-2026-28244)

Apple Safari is a web browser available for iOS, iPadOS, and macOS platforms, primarily used for accessing internet content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit...

Apache Shiro input validation vulnerability (CNVD-2026-26205)

Apache Shiro is a security and permission framework that is open-source under the Apache Foundation in the United States. There is an input validation vulnerability in Apache Shiro. This vulnerability stems from the lack of escaping of special characters according to RFC 2253 in the...

Google Android Configuration Error Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a configuration vulnerability that stems from unsafe default values in the NfcDispatcher.java file. Attackers can exploit this vulnerability to gain local privileges...

Google Android competition conditions issue vulnerability (CNVD-2026-26393)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a vulnerability known as a race condition. This vulnerability stems from a persistent synchronization issue within the createSessionInternal function in PackageInstallerService.java...

Google Android Authorization Vulnerability (CNVD-2026-26201)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to cause local information leaks...

Google Android has an unknown vulnerability (CNVD-2026-26390)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There are security vulnerabilities in Google Android, which stem from a lack of boundary checks in the mfccorenalqgetdecmetadataseinal function in mfccorenal.q. Attackers can exploit these vulnerabilities to execute...

Cisco Identity Services Engine Software Authorization Vulnerability

Cisco Identity Services Engine Software is a identity management platform developed by the American company Cisco. There are authorization-related vulnerabilities in Cisco Identity Services Engine Software. These vulnerabilities stem from improper authorization checks during resource access...

Apple Safari buffer overflow vulnerability (CNVD-2026-26436)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. Apple Safari has a buffer overflow vulnerability, which stems from an inability to properly validate boundaries. Attackers can exploit this vulnerability by processing maliciously crafted web...

Google Android Authorization Vulnerability (CNVD-2026-29385)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities related to authorization, and attackers can exploit these vulnerabilities to cause local information leaks...

Multiple Mozilla product information leakage vulnerabilities (CNVD-2026-26879)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26884)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26886)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26389)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have buffer overflow vulnerabilities...

Multiple Mozilla product code execution vulnerabilities (CNVD-2026-26877)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla product information leakage vulnerabilities (CNVD-2026-26880)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have service denial vulnerabilities (CNVD-2026-26374)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that was separated from the Mozilla Application Suite. Several Mozilla products have denial-of-service vulnerabilities, whic...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26388)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have buffer overflow vulnerabilities...

Google Chrome Authorization Vulnerability (CNVD-2026-26521)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper handling of passwords in the Password module. Attackers can exploit this vulnerability to leak cross-source data...

Google Chrome Input Validation Vulnerability (CNVD-2026-26522)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper implementations in extensions. Attackers can exploit this vulnerability to bypass the origin policy using a...

Apple Safari resource management error vulnerability (CNVD-2026-28248)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for browsing web pages and processing web content. There is a resource management vulnerability in Apple Safari. The cause of this vulnerability is the improper handling of...

Apple Safari resource management error vulnerability (CNVD-2026-28246)

Apple Safari is a web browser developed by Apple Inc., primarily providing features for web browsing, content rendering, and network functions integrated with the operating system. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper memory manageme...

Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

Google Android SQL Injection Vulnerability (CNVD-2026-29386)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a SQL injection vulnerability. This vulnerability stems from the lack of validation for SQL statements submitted from external inputs by the Contacts Provider. Attackers can exploit this...

Google Android Processing Logic Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a processing logic vulnerability in Google Android, and attackers can exploit this vulnerability to cause remote information leaks. User interaction is required to utilize this vulnerability...

Google Android resource management error vulnerability (CNVD-2026-29390)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There is a resource management vulnerability in Google Android. This vulnerability stems from confusion in the instructions for releasing memory in multiple functions of vpuioctl.c. Attackers can exploit this...

Google Android Permission Elevation Vulnerability (CNVD-2026-29393)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a privilege escalation vulnerability. This vulnerability stems from the confusion in the instructions for releasing memory in the lwisdeviceexternaleventemit function found i...