CVE-2026-95277

A use-after-free condition in the Views component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be exploited by tricking a user into viewing a specially crafted HTML page . Remediation ...

CVE-2026-95293

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a High severity flaw involving an uninitialized resource in the GPU component . A remote attacker can exploit this by navigating to a crafted HTML page to read memory outside the sandbox . Remediation is available in version 154.0.80...

CVE-2026-95373

A use after free flaw was discovered in the DevTools component of the Chromium browser (Google Chrome) prior to version 154.0.8037.57 . A remote attacker could leverage social engineering and a crafted HTML page to execute arbitrary code inside the sandbox. This vulnerability impacts various Linu...

CVE-2026-95324

An uninitialized resource flaw in the GPU component of the Google Chrome (Chromium) browser (prior to version 154.0.8037.57 ) allows a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. The Chromium security severity for this issue...

CVE-2026-95372

A Use after free vulnerability exists in Chromecast within Google Chrome versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. Reme...

CVE-2026-95283

A buffer overflow vulnerability exists in the Tint component of Google Chrome on Android (prior to version 154.0.8037.57) and in the chromium-browser package. A remote attacker can exploit this flaw by tricking a user into viewing a specially crafted HTML page , potentially leading to the executi...

CVE-2026-95298

A use-after-free vulnerability exists in the browser process of Google Chrome (and Chromium ) prior to version 154.0.8037.57 . This flaw occurs because memory is improperly accessed after being released, allowing a local attacker to potentially execute arbitrary code outside the security sandbox ...

CVE-2026-95315

A use after free vulnerability exists in the Aura component of the Google Chrome browser (versions prior to 154.0.8037.57 ). This flaw allows a local attacker to potentially execute arbitrary code outside the sandbox through UI Interaction . Remediation is available in version 154.0.8037.57 . No ...

CVE-2026-95291

Google Chrome on iOS prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation in SecurityIndicators . A remote attacker can exploit this by using a crafted HTML page to spoof the address bar . Remediation includes upgrading to version 154.0.8037.57 or later. Exploitation details are...

CVE-2026-95355

Google Chrome on iOS versions prior to 154.0.8037.57 is vulnerable to an incorrect authorization flaw in the Navigation component. A remote attacker who successfully compromises the renderer process can exploit this vulnerability to potentially execute arbitrary code outside the sandbox using a c...

CVE-2026-95310

A use after free vulnerability exists in the AdFilter component of Google Chrome and Chromium prior to version 154.0.8037.57 . A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution outside the sandbox . Remediation is available in version 154.0.8...

CVE-2026-95301

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in the Extensions component. A remote attacker who has compromised the renderer process can exploit this by using a crafted HTML page to bypass site isolation . This vulnerability is categorized with High...

CVE-2026-95356

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a use after free flaw in WindowDialog . A remote attacker can leverage social engineering and a crafted HTML page to potentially execute arbitrary code outside the sandbox. Remediation is available in version 154.0.8037.57 . Exploita...

CVE-2026-95329

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to an out of bounds write in WebGL . A remote attacker can exploit this via a crafted HTML page to potentially execute arbitrary code outside the sandbox. This issue is rated as Critical by Chromium security severity. Remediat...

CVE-2026-95313

A use after free vulnerability exists in the Fullscreen component of Google Chrome prior to version 154.0.8037.57 . A remote attacker can exploit this flaw by navigating to a crafted HTML page to potentially execute arbitrary code outside the sandbox . Remediation is available in version 154.0.80...

CVE-2026-95349

A buffer overflow vulnerability exists in WebGL within Google Chrome on Android (versions prior to 154.0.8037.57 ). This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The vulnerability has been addressed in the 154...

CVE-2026-95284

A heap-based buffer overflow vulnerability exists in the ANGLE graphics engine within Google Chrome on Android (prior to version 154.0.8037.57) and the chromium-browser component. A remote attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page to execute arbitrar...

CVE-2026-95322

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to an out of bounds write in the GPU component. A remote attacker who has already compromised the renderer process can leverage this flaw to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. R...

CVE-2026-95281

A buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android prior to version 154.0.8037.57 . A remote attacker can exploit this flaw by using a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerability is classified with Critical security se...

CVE-2026-95339

A use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by leveraging a crafted HTML page. The impact is categorized as Critical by Chromium security. Re...

CVE-2026-95357

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to an out of bounds write in the GPU component. A remote attacker can exploit this vulnerability by using a crafted HTML page to potentially execute arbitrary code outside the sandbox. Remediation is available in version 154.0...

CVE-2026-95350

A buffer overflow in the ANGLE component of Google Chrome on Android (versions prior to 154.0.8037.57 ) allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability is rated as Critical by Chromium security. Remediation includes updating to ve...

CVE-2026-102761

The NetX Duo WebSocket client is vulnerable to a memory corruption issue due to an incorrect unmasking cursor reset logic. When processing a chained packet, the client resets the cursor to the first NX_PACKET while the loop's upper bound remains tied to the current packet. In a standard contiguou...

CVE-2026-102760

When NetX Secure is built with NX_SECURE_KEY_CLEAR, a vulnerability exists where TLS records are wiped after being handed to the TCP layer . Because the TCP layer may have already released the packet chain back to the packet pool , the wipe operation writes zeros into packets that are free or in ...

CVE-2026-102759

NetX Secure TLS is vulnerable to a flaw where it accepts empty application-data records without performing message authentication code (MAC) verification . Specifically, in the _nx_secure_verify_mac function, if a decrypted application record's length matches the negotiated MAC size, the system t...

CVE-2026-102758

The NetX Secure library contains a vulnerability in the _nx_secure_x509_asn1_tlv_block_parse() function, which handles ASN.1 TLV blocks during X.509 certificate parsing. The root cause is an out-of-bounds read because the function reads a one-byte ASN.1 tag from the buffer before verifying that t...

CVE-2026-102757

A vulnerability in ThreadX allows an unprivileged, memory-protected module to gain privileged memory read and write access. The root cause is a flaw in the Module Manager , which incorrectly validates object addresses by only checking if they fall outside the module. An attacker can bypass this b...

CVE-2026-102811

Marmite versions through 0.4.2 are vulnerable to unauthenticated API access via its development server endpoints: /__marmite__/content, /__marmite__/config, and /__marmite__/file/. Due to missing authentication, attackers can create, modify, or overwrite site content and configurations. Furthermo...

CVE-2026-102810

Marmite versions through 0.4.2 are vulnerable to a path traversal vulnerability in the development server initiated via the --serve flag. The root cause is located in the handle_request function within src/server.rs, which fails to reject .. segments after percent-decoding and joining the request...

CVE-2026-102808

PX4 Autopilot versions through 1.17.0 are vulnerable to a NULL pointer dereference within the sd_stress command. The root cause is the lack of validation for the -b byte count parameter before it is processed by malloc() and memset(). An attacker with shell access, which can be obtained via MAVLi...

CVE-2026-102809

PX4 Autopilot versions through 1.17.0 are vulnerable to a stack exhaustion vulnerability within the file2 test command. The root cause is a failure to validate the write chunk size parameter , allowing an attacker with shell access to provide an excessively large value to the -c option . This act...

CVE-2026-102807

Versions of OpenClaw prior to 2026.9.4 are vulnerable to an incorrect authorization flaw in the mcp.app.view method. This vulnerability allows operators with only operator.read scope to obtain a standalone ticket that can be redeemed at the MCP app view endpoint. By doing so, an attacker can bypa...

CVE-2026-102806

OpenClaw versions before 2026.9.5 are affected by an incorrect authorization vulnerability in the Gateway's local media root allowlist. This flaw breaks filesystem isolation between sandboxed sessions, allowing sandboxed sessions or untrusted content to read files from sibling session sandboxes o...

CVE-2026-102560

A heap buffer overflow vulnerability exists in libsoup within the permessage-deflate WebSocket extension . When processing very large outgoing messages, truncated size calculations for GByteArray growth can wrap, leading zlib to write past the allocated buffer. This issue can impact the availabil...

CVE-2026-102559

A heap buffer overflow vulnerability exists in libsoup during the construction of a masked WebSocket client frame . When processing very large outgoing payloads, size values passed to GByteArray allocation APIs may be truncated while the masking routine continues to use the full length. This coul...

CVE-2026-102558

A heap buffer overflow vulnerability exists in libsoup within the SoupWebsocketConnection component. When the max-incoming-payload-size is set to unlimited (0), an attacker can provide a controlled frame length that causes the length to wrap during the growth of the incoming GByteArray . This res...

CVE-2026-102555

A heap buffer overflow exists in libsoup within the soup_uri_decode_data_uri() function. The vulnerability occurs because the function incorrectly treats base64 data-URI payloads as NUL-terminated strings when invoking g_base64_decode_inplace() . If a percent-decoded payload contains embedded NUL...

CVE-2026-102424

The Joomla Extension - balbooa.com component, specifically Balbooa Forms versions

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-102425

The Joomla Extension - balbooa.com is vulnerable to unauthenticated Remote Code Execution (RCE) in Balbooa Forms versions

CVE-2026-101126

The Joomla Extension - balbooa.com is vulnerable to file metadata tampering in Balbooa Forms versions prior to 2.4.3.4 . The root cause is that the final form submission processes JSON arrays for upload fields while only verifying that IDs are numeric. Because the application trusts client-suppli...

CVE-2026-101112

The Joomla Extension - balbooa.com - Balbooa Forms version

CVE-2026-101127

The Joomla Extension - balbooa.com (specifically Balbooa Forms ) is vulnerable to an unauthenticated stored Cross-Site Scripting (XSS) in versions prior to 2.4.3.4 . The root cause is that the public form upload endpoint validates file extensions and MIME types but stores the attacker-supplied or...

CVE-2026-102676

The Electron framework is vulnerable in versions prior to 41.10.6 , 42.9.2 , 43.4.1 , and 44.0.0-beta.5 . An untrusted "> guest can enable nodeIntegrationInWorker for its Web Workers, even if the unsandboxed embedder has Node.js integration disabled. This allows the guest content to create a N...

CVE-2026-102796

The MediaWiki - UserPageViewTracker Extension is vulnerable to an SQL Injection flaw caused by improper neutralization of special elements in SQL commands. An unauthenticated remote attacker can exploit this by submitting crafted input through the filterusers or ignoreusers parameters. This vulne...

CVE-2026-102675

The Electron framework (versions prior to 41.10.6 , 42.9.2 , 43.4.1 , and 44.0.0-beta.5 ) contains a vulnerability where responses served via protocol.registerFileProtocol or protocol.registerHttpProtocol remain script-readable across origins. This occurs when a custom scheme is registered with s...

CVE-2026-100245

The Wikimedia Foundation Mediawiki - Wikibase Extension is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation. Specifically, the vulnerability occurs on Wikibase Special:SetSiteLink when an unescaped system message is proc...

CVE-2026-102674

The Electron framework (prior to versions 41.10.6 , 42.9.2 , 43.4.1 , and 44.0.0-beta.5 ) contains a vulnerability where windows opened from a sandboxed top-level document fail to inherit the document's active HTML sandbox restrictions . This allows untrusted content in a sandboxed document to op...

CVE-2026-100244

The Wikimedia Foundation Mediawiki - CentralAuth Extension is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The flaw allows for the exposure of locally suppressed block information via the globaluserinfo API and Special:CentralAuth . This issue is char...

CVE-2026-102697

Ollama versions 0.14.0 before 0.31.2 are vulnerable to an incorrect authorization flaw within the experimental agent mode Bash tool approval mechanism . The root cause is a failure to properly parse shell syntax, which allows attackers to bypass session approval requirements. By using prompt inje...