CVE-2026-84916

The description for CVE-2026-84916 is currently a reserved placeholder with no public technical details provided. No connected documents offer additional information. Monitor for updates when the candidate is publicized.

CVE-2026-84920

CVE-2026-84920 has been reserved by an organization or individual, with no technical details publicly available yet. Monitor for updates when the candidate is publicized.

CVE-2026-16648

CVE-2026-16648 has been reserved but no technical details are yet publicly available in the provided documents. The affected product, root cause, and impact remain unknown. Action: monitor for updates when the candidate is publicized.

CVE-2026-84914

CVE-2026-84914 is currently a reserved candidate with no public technical details. The description indicates it will be filled in when the security issue is officially announced. Monitor for updates as details become available.

CVE-2026-84924

CVE-2026-84924 has been reserved by an organization or individual and no technical details (affected product, root cause, or impact) are publicly available yet. Monitor for updates as the candidate is expected to be publicized with full details.

CVE-2026-84918

CVE-2026-84918 has been reserved but no technical details are yet publicly available. The vulnerability type, affected products, and impact remain unknown. Monitor for updates once the assigning organization publicizes the entry.

CVE-2026-73442

CVE-2026-73442 affects Arista EOS with VRRP enabled. Peer device VRRP authentication credentials are logged in cleartext in agent trace logs, allowing an authenticated user with sufficient privileges (or a system receiving forwarded log output) to obtain those credentials without direct access to...

CVE-2026-81163

CVE-2026-81163 is a reserved candidate with no public technical details yet. The affected product, vulnerability type, and impact remain undisclosed. Action: monitor for updates once the reserving organization publicizes the entry.

CVE-2026-84910

CVE-2026-84910 is currently in reserved status with no public technical details available. The vulnerability type, affected products, and impact are not yet disclosed. Monitor for future updates when the assignee publishes the full description.

CVE-2024-26225

CVE-2024-26225 is currently reserved with no public technical details available in the provided documents. Monitor for future updates when the candidate is officially publicized with full disclosure.

CVE-2026-84915

This CVE is currently reserved as a placeholder with no public technical details available regarding the affected product, root cause, or impact. Monitor for updates when the candidate is formally publicized.

CVE-2026-84919

This CVE entry is currently reserved and no technical details are publicly available in the provided documents. Affected products, root cause, and impact remain unspecified. Monitor for updates once the candidate is publicized.

CVE-2025-23029

CVE-2025-23029 is currently in reserved status with no public technical details about the affected product, root cause, or impact. Monitor for updates as the reserving organization publicizes the vulnerability.

CVE-2024-35585

Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...

CVE-2026-73462

CVE-2026-73462 affects Arista EOS running IGMP snooping (enabled by default on all VLANs). A network-adjacent, unauthenticated attacker can send malformed packets to trigger an out-of-bounds read (CWE-125) in the IGMP snooping agent, causing it to terminate and flood multicast traffic to all port...

CVE-2025-46418

Westermo WeOS 5 (version 5.24 and later), an operating system deployed in industrial settings, is vulnerable to OS command injection through unsafe handling of media definitions . An attacker with administrative privileges can execute commands beyond their typical access rights, potentially compr...

CVE-2026-73456

CVE-2026-73456 is a critical code injection vulnerability (CWE-94, CVSSv3.1 10.0 ) in the gNPSI (gRPC Network Packet Sampling Interface) component of Arista EOS platforms. An unauthenticated gNPSI client can craft a malicious request to achieve arbitrary code execution , granting full administrat...

CVE-2026-84923

CVE-2026-84923 has been reserved but no technical details are yet publicly available in the provided documents. Affected products, root cause, and impact remain unknown. Monitor for updates as the reserving organization publishes details.

CVE-2026-84913

This CVE is currently reserved with no public technical details available in the provided documents. The vulnerability description, affected products, and impact remain unknown. Monitor for updates as details are expected once the vendor publicizes the issue.

CVE-2026-84911

CVE-2026-84911 has been reserved by an organization or individual and no technical details are yet publicly available. Monitor for updates when the candidate is publicized.

CVE-2026-73443

CVE-2026-73443 affects Arista EOS running VRRPv2 with IP-AH authentication enabled. An unauthenticated attacker on the same Layer 2 segment can capture and replay a legitimate VRRP advertisement indefinitely (CWE-294), advertising stale state that prevents a backup router from assuming the virtua...

CVE-2026-77522

CVE-2026-77522 is currently a reserved candidate with no public technical details yet. Affected product, root cause, and impact remain unknown. Monitor for updates when the reserving organization publicizes the vulnerability.

CVE-2026-84917

CVE-2026-84917 is currently in a reserved state. No technical details about affected products, root cause, or impact are publicly available in the provided documents. Monitor for updates once the candidate is publicized.

CVE-2026-84912

CVE-2026-84912 has been reserved but no public technical details are currently available. Monitor for updates when the vendor announces the vulnerability and releases associated patch information.

CVE-2026-73457

CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled—a feature that is disabled by default . When the gNPSI trace facility EosRpcAuth is explicitly enabled, client credentials may be logged in clear text in local or remote accounting logs, ex...

CVE-2026-84356

CVE-2026-84356 is a UI misrepresentation flaw in the FullScreen component of Google Chrome prior to version 152.0.7977.75 . A remote attacker could deliver a crafted HTML page that spoofs the address bar , allowing the victim to be tricked into believing they are on a different site. Chromium rat...

CVE-2026-84331

CVE-2026-84331 is an incorrect authorization flaw in the Actor component of Google Chrome prior to version 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Low ; t...

CVE-2026-84350

CVE-2026-84350 is a use-after-free in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Low , while the assi...

CVE-2026-84335

CVE-2026-84335 is an incorrect authorization vulnerability in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the sandbox via a cra...

CVE-2026-84334

CVE-2026-84334 is an incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows , prior to version 152.0.7977.75 . A local attacker can exploit it to execute arbitrary code outside the Chrome sandbox via a local program. The flaw was reported by Google on 2026-0...

CVE-2026-84327

CVE-2026-84327 is an incorrect authorization flaw in the Autofill component of Google Chrome on Android , affecting versions prior to 152.0.7977.75 . A remote attacker can leverage social engineering to obtain sensitive information via a crafted HTML page. Chromium rates the severity as Low , whi...

CVE-2026-84329

A confused deputy vulnerability in the CredentialProvider component of Google Chrome on Windows (prior to 152.0.7977.75 ) allowed a remote attacker who had already compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium rates the severity as Low ; the CVSS...

CVE-2026-84348

CVE-2026-84348 is an information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 (Linux) and 152.0.7977.75/.76 (Windows/Mac). A remote attacker can potentially leak sensitive information via a crafted HTML page . Chromium rates this as Medium severity; CVSS 3.1 base score is 6.5 (AV:...

CVE-2026-84355

CVE-2026-84355 is an incorrect authorization vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . The Chromium project rates this ...

CVE-2026-84323

CVE-2026-84323 is a missing authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.75 (and 152.0.7977.76 on Windows/Mac). A remote attacker who had already compromised the renderer process could leverage social engineering to obtain sensitive information via a crafted...

CVE-2026-84332

CVE-2026-84332 is an incorrect authorization flaw in the SiteSettings component of Google Chrome prior to 152.0.7977.75 . A remote attacker can bypass system access restrictions by delivering a crafted HTML page to the victim, requiring user interaction. The CVSS v3.1 score is 6.5 (Medium) with a...

CVE-2026-84330

CVE-2026-84330 is a UI misrepresentation vulnerability in Google Chrome on Android prior to version 152.0.7977.75 , affecting the FullScreen component. A remote attacker can spoof the address bar via a crafted HTML page, requiring user interaction. The CVSS 3.1 score is 5.4 (Medium) with a vector...

CVE-2026-84358

CVE-2026-84358 is a Medium -severity improper privilege management flaw in the Downloads component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to spoof the address bar , potentially misleading users int...

CVE-2026-84328

CVE-2026-84328 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 152.0.7977.75 . A remote attacker with a compromised renderer process could leverage a crafted HTML page to bypass the web origin policy . The vulnerability was reported by Google...

CVE-2026-84326

CVE-2026-84326 is a High-severity uninitialized resource vulnerability in the V8 JavaScript engine of Google Chrome, fixed in version 152.0.7977.75 . A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The CVSS 3.1 score is 8.8 (AV:N/...

CVE-2026-84333

CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...

CVE-2026-84351

CVE-2026-84351 is a buffer overflow in the GPU component of Google Chrome on Windows prior to 152.0.7977.75 . A remote attacker who had compromised the renderer process could exploit it via a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerability was rated High by Chr...

CVE-2026-84325

CVE-2026-84325 is an improper input validation vulnerability in the DataTransfer component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can bypass system access restrictions via a co-installed app. Chromium rates this as High severity; the CNA-assigned...

CVE-2026-84347

CVE-2026-84347 is a use after free vulnerability in the WebRTC component of Google Chrome prior to 152.0.7977.75 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The vulnerability carries a CVSS 3.1 score of 8.8 (High) with user inte...

CVE-2026-84359

CVE-2026-84359 is an information leak in the Skia rendering library within Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , bypassing same-origin isolation. The vulnerability was...

CVE-2026-84324

A use-after-free vulnerability in the Proxy component of Google Chrome (versions prior to 152.0.7977.75 ) allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates it High severity; NVD assigns a CVSS 3.1 score of 9.0 (CRITICAL) with a Chan...

CVE-2026-84349

CVE-2026-84349 is a use-after-free vulnerability in the Browser component of Google Chrome prior to 152.0.7977.75 (Windows/Mac also .76). A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox , escalatin...

CVE-2026-84357

CVE-2026-84357 is an improper input validation vulnerability in the Omnibox component of Google Chrome prior to version 152.0.7977.75 . A remote attacker leveraging social engineering can bypass the web origin policy via crafted network traffic. The Chromium security severity is rated High , with...

CVE-2026-84352

CVE-2026-84352 is a critical use-after-free vulnerability in WebGL in Google Chrome (prior to 152.0.7977.75 on Android), allowing a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The b...

CVE-2026-84353

CVE-2026-84353 is a critical use-after-free vulnerability in Shared Tab Groups of Google Chrome prior to version 152.0.7977.75 (Android/Linux) and 152.0.7977.76 (Windows/Mac). A remote attacker leveraging social engineering (e.g., luring a user to a malicious website or HTML email) can execute ar...