198424 matches found
CVE-2026-110914
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110915
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110917
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-110918
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-110920
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110921
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110913
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110919
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110922
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-109468 ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-108454 Microsoft Office PowerPoint Information Disclosure Vulnerability
...
CVE-2026-108455 Microsoft Office PowerPoint Information Disclosure Vulnerability
...
CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability
...
CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability
...
CVE-2026-108450 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108451 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108449 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability
...
CVE-2026-108446 Microsoft Office Excel Remote Code Execution Vulnerability
...
CVE-2026-108447 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108445 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108443 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108444 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-108442 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108441 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108440 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108439 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108437 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108438 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-108435 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-108436 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-108433 Microsoft Office Word Security Feature Bypass Vulnerability
...
CVE-2026-108434 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-108432 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108431 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108430 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108429 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108427 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-108426 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...
CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...
CVE-2026-111171 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...
CVE-2026-111168 LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameter
LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploading SVGs with malformed Content-Type parameters. Attackers can upload an SVG typed 'image/svg+xml; x' via /api/v1/media so GET /uploads/uuid serves it inlin...
CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...
CVE-2026-111163 WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in WMParseNewHmi in src/fhmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation,...
CVE-2026-111161 libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
CVE-2026-111158 EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect
EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3detect in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2ISVALIDHEADER to msr3parse or ms3detect, over-reading up to 8 bytes and...
CVE-2026-111156 libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...
CVE-2026-111153 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...