CVE-2026-16423

Google Chrome UI use-after-free (CVE-2026-16423) affects Chrome versions prior to 150.0.7871.182. Root cause: use-after-free in the UI code, enabling a remote attacker to craft an HTML page and, via user-initiated UI gestures, potentially heap-corrupt and execute arbitrary code. Impact is high (r...

CVE-2026-16422

Google Chrome on Linux is affected by CVE-2026-16422 due to insufficient validation of untrusted input in the Certificate component. Prior to version 150.0.7871.182, this could allow an attacker with a privileged network position to perform domain spoofing via malicious network traffic. The issue...

CVE-2026-16416

CVE-2026-16416 is a Chromium/Google Chrome vulnerability: an integer overflow in Chromecast can allow a local attacker to perform a sandbox escape via malicious network traffic. Affected product: Google Chrome/Chromium before version 150.0.7871.182. Impact is reported as high (CVSS 8.3). Remediat...

CVE-2026-16418

CVE-2026-16418 describes a stack buffer overflow in the V8 engine of Google Chrome (Chromium) before version 150.0.7871.182, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product is Google Chrome (Chromium-based) on desktop Windows; expl...

CVE-2026-16417

CVE-2026-16417 affects Google Chrome with uninitialized use in Skia . A remote attacker who compromised the renderer could leak cross-origin data via a crafted HTML page. Affected versions are Chrome prior to 150.0.7871.182 . The incident is documented by multiple sources (NVD, EUVD, MSRC, Debian...

CVE-2026-16415

CVE-2026-16415 is a Chromium/Google Chrome vulnerability: insufficient validation of untrusted input in Extensions allows a crafted HTML page to spoof the Omnibox. Affects Google Chrome/Chromium before 150.0.7871.182 (Windows/Linux/others); Edge (Chromium-based) addresses via Chromium fix. Debian...

CVE-2026-16414

CVE-2026-16414 involves insufficient validation of untrusted input in Chromecast within Google Chrome/Chromium, enabling a local attacker to potentially escape the sandbox via malicious network traffic. Affected: Google Chrome/Chromium (Chromecast) prior to 150.0.7871.182. Sources consistently id...

CVE-2026-16413

CVE-2026-16413 is an out-of-bounds write in ANGLE used by Google Chrome (Chromium-based) prior to 150.0.7871.182, potentially enabling a sandbox escape when a renderer process is compromised via a crafted HTML page. Connected sources confirm the issue in ANGLE and identify affected Chrome/Chromiu...

CVE-2026-16421

CVE-2026-16421 relates to an Inappropriate implementation in WebAudio in Google Chrome (Chromium) before 150.0.7871.182 that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is part of a set of Chromium/WebAudio issues associated ...

CVE-2026-16420

CVE-2026-16420 is a Type Confusion in WebAudio affecting Google Chrome prior to 150.0.7871.182 (Chromium). The flaw, exploitable via a crafted HTML page, allows remote code execution inside the sandbox. Affected product: Google Chrome (older than 150.0.7871.182). Remediation: upgrade to Chrome 15...

CVE-2026-16485

SourceCodester Class and Exam Timetabling System 1.0 suffers a cross-site scripting (XSS) vulnerability in /class.php via manipulation of the day parameter. The issue can be exploited remotely and the exploit has been disclosed publicly. No additional technical details (such as exact payloads, af...

CVE-2026-56816

Netty HTTP/3 vulnerability (CVE-2026-56816): The Http3FrameCodec buffers incoming reserved HTTP/3 frame types up to the wire payload length and trusts payLoadLength, enabling an attacker to open many QUIC streams and send frames with oversized payloads, causing memory exhaustion and denial of ser...

CVE-2026-58429

Technical details for CVE-2026-58429 are not publicly available in the provided documents. Monitor for future updates.

CVE-2026-59765

Technical details for CVE-2026-59765 are not publicly available in the provided documents. The entry remains reserved with no disclosed affected products, impact, or remediation. Monitor for updates from the submitting organization.

CVE-2026-58511

Technical details for CVE-2026-58511 are not publicly available in the provided documents. Monitor for updates; no product, impact, or remediation information is available from these sources.

CVE-2026-57897

Technical details for CVE-2026-57897 are not publicly available in the provided documents. Monitor for updates from official disclosures; no affected products, vectors, or remediation are specified.

CVE-2026-58510

Technical details for CVE-2026-58510 are not publicly available in the provided documents. Monitor for updates from the issuing authority and future disclosures.

CVE-2026-65319

Feedbin contains an unauthenticated information disclosure via the GET /api/v2/entries/:id/text endpoint. The vulnerability arises because the authorization check is bypassed (before-action filter skipped), enabling an attacker to enumerate private article content by iterating sequential entry ID...

CVE-2026-62574

CVE-2026-62574 affects Oracle Java SE and GraalVM variants. Affected: Oracle Java SE 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. Vulnerability described as easily exploitable with a low-privileged, local ...

CVE-2026-62563

CVE-2026-62563 affects Oracle Work in Process (Oracle E-Business Suite) component Internal Operations, across 12.2.5–12.2.15. It allows a low-privileged, network-accessible attacker (HTTP) with required human interaction to compromise data via unauthorized update/insert/delete and read of Oracle ...