61248 matches found
CVE-2026-16385
Information disclosure due to uninitialized memory in the Graphics: We...
CVE-2026-16383
Mitigation bypass in the DOM: Networking component. This vulnerability...
CVE-2026-16384
Information disclosure due to uninitialized memory in the Graphics: We...
CVE-2026-16382
Mitigation bypass in the DOM: Service Workers component. This vulnerab...
CVE-2026-16381
Same-origin policy bypass in the Networking: DNS component. This vulne...
CVE-2026-16380
Mitigation bypass in the Networking component. This vulnerability was...
CVE-2026-16358
Site isolation issue in the Graphics: WebRender component. This vulner...
CVE-2026-16379
Privilege escalation in the DOM: Content Processes component. This vul...
CVE-2026-16378
Other issue in the DOM: Copy & Paste and Drag & Drop component. This v...
CVE-2026-16377
Mitigation bypass in the PDF Viewer component. This vulnerability was...
CVE-2026-16376
Denial-of-service in the Graphics: WebGPU component. This vulnerabilit...
CVE-2026-16375
Site isolation issue in the Networking: HTTP component. This vulnerabi...
CVE-2026-16374
Information disclosure in the Framework component in DevTools. This vu...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android...
CVE-2026-16372
Privilege escalation in the DOM: Content Processes component. This vul...
CVE-2026-16371
Privilege escalation in the DOM: Navigation component. This vulnerabil...
CVE-2026-16370
Mitigation bypass in the DOM: Networking component. This vulnerability...
CVE-2026-16357
Incorrect boundary conditions in the Graphics component. This vulnerab...
CVE-2026-16356
Sandbox escape due to use-after-free in the Disability Access APIs com...
CVE-2026-16355
JIT miscompilation in the JavaScript Engine: JIT component. This vulne...
CVE-2026-16369
Integer overflow in the JavaScript: WebAssembly component. This vulner...
CVE-2026-16367
Sandbox escape due to invalid pointer in the Disability Access APIs co...
CVE-2026-16368
Incorrect boundary conditions in the JavaScript: WebAssembly component...
CVE-2026-16354
Information disclosure in the Graphics: ImageLib component. This vulne...
CVE-2026-16353
Invalid pointer in the DOM: Bindings WebIDL component. This vulnerab...
CVE-2026-16366
Privilege escalation in the DOM: Navigation component. This vulnerabil...
CVE-2026-16365
Privilege escalation in the DOM: Workers component. This vulnerability...
CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component...
CVE-2026-16363
JIT miscompilation in the JavaScript: WebAssembly component. This vuln...
CVE-2026-16352
Sandbox escape due to use-after-free in the Disability Access APIs com...
CVE-2026-16351
Sandbox escape due to use-after-free in the DOM: Navigation component...
CVE-2026-16362
Use-after-free in the WebRTC: Audio/Video component. This vulnerabilit...
CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb component. Thi...
CVE-2026-16349
Same-origin policy bypass in the DOM: Navigation component. This vulne...
CVE-2026-16461
A stack-based buffer overflow was found in rpcbind's rpcinfo utility...
CVE-2026-59844
A flaw was found in libssh. A remote authenticated client can issue SS...
CVE-2026-59845
A flaw was found in libssh. When ProxyCommand is used, an unchecked fo...
CVE-2026-59843
A flaw was found in libssh. A remote authenticated peer can advertise...
CVE-2026-59842
A flaw was found in libssh. During server-side GSSAPI key exchange, a...
CVE-2026-15370
A flaw was found in libssh. During SFTP server directory listing, the...
CVE-2026-63729
The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...
CVE-2026-55833
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded maxHeaderSize and marked the frame truncated in...
CVE-2026-55831
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in...
CVE-2026-15905
Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. Chromium security severity: High...
CVE-2026-15904
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-15903
Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-15902
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-15901
Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-15899
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-15900
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...