[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102307 | 29 Sep 2026 | CVSS 4.7 | Google ChromeUninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via… | |
| CVE-2026-102308 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code… | |
| CVE-2026-102309 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-102299 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102300 | 29 Sep 2026 | CVSS 4.3 | Google ChromeUninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML… | |
| CVE-2026-102301 | 29 Sep 2026 | CVSS 8.3 | Google ChromeOut of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-102252 | 29 Sep 2026 | CVSS 6.9 | Google OSV-SCALIBRA path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an… | |
| CVE-2026-100296 | 29 Sep 2026 | CVSS 8.1 | Anjvision YSSD-RTMP-H5In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler… | |
| CVE-2026-100297 | 29 Sep 2026 | CVSS 5.3 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the… | |
| CVE-2026-100298 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions… | |
| CVE-2026-100299 | 29 Sep 2026 | CVSS 6.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based… | |
| CVE-2026-100291 | 29 Sep 2026 | CVSS 9.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required… | |
| CVE-2026-100292 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional… | |
| CVE-2026-100293 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic… | |
| CVE-2026-100294 | 29 Sep 2026 | CVSS 7.5 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices… | |
| CVE-2026-100295 | 29 Sep 2026 | CVSS 6.3 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions… | |
| CVE-2024-31027 | 29 Sep 2026 | CVSS 5.4 | VulnerabilityCross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary… | |
| CVE-2024-31026 | 29 Sep 2026 | CVSS 9.8 | VulnerabilityAn issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input… | |
| CVE-2026-102827 | 29 Sep 2026 | CVSS 9.8 | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior… | Fix |
| CVE-2026-102828 | 29 Sep 2026 | CVSS 9.8 | simple-git unsafe-operation guard does not block trailer command configurationsimple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From… | Fix |
| CVE-2026-102829 | 29 Sep 2026 | CVSS 9.2 | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionsimple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior… | Fix |
| CVE-2026-102830 | 29 Sep 2026 | CVSS 6.8 | JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0… | Fix |
| CVE-2026-102831 | 29 Sep 2026 | CVSS 8.1 | JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardJupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0… | Fix |
| CVE-2026-102822 | 29 Sep 2026 | CVSS 3.7 | russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panicRussh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR… | Fix |
| CVE-2026-102823 | 29 Sep 2026 | CVSS 7.5 | russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedRussh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA… | Fix |
| CVE-2026-102824 | 29 Sep 2026 | CVSS 4.3 | Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchangeRussh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs… | Fix |
| CVE-2026-102825 | 29 Sep 2026 | CVSS 3.7 | Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathRussh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in… | Fix |
| CVE-2026-102826 | 29 Sep 2026 | CVSS 8.1 | simple-git allows command execution through unblocked Git configuration includessimple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior… | Fix |
| CVE-2026-102820 | 29 Sep 2026 | CVSS 6.2 | pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance… | Fix |
| CVE-2026-102821 | 29 Sep 2026 | CVSS 6.5 | Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekeyRussh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without the required… | Fix |
| CVE-2026-102616 | 29 Sep 2026 | CVSS 7.3 | risesoft-y9 WorkFlow-EngineA vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file… | |
| CVE-2026-95382 | 29 Sep 2026 | CVSS 6.5 | Google ChromeImproper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-95384 | 29 Sep 2026 | CVSS 5.3 | Google ChromeRace condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information… | |
| CVE-2026-95385 | 29 Sep 2026 | CVSS 6.5 | Google ChromeInappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social… | |
| CVE-2026-95371 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-95372 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95373 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code… | |
| CVE-2026-95374 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML… | |
| CVE-2026-95375 | 29 Sep 2026 | CVSS 6.3 | Google ChromeIncorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95376 | 29 Sep 2026 | CVSS 8.0 | Google ChromeExternally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to… | |
| CVE-2026-95380 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… | |
| CVE-2026-95381 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95364 | 29 Sep 2026 | CVSS 5.4 | Google ChromeImproper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-95365 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-95366 | 29 Sep 2026 | CVSS 6.5 | Google ChromeUse of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-95367 | 29 Sep 2026 | CVSS 5.3 | Google ChromeInformation leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-95368 | 29 Sep 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially… | |
| CVE-2026-95369 | 29 Sep 2026 | CVSS 8.8 | Google ChromeInappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside… | |
| CVE-2026-95370 | 29 Sep 2026 | CVSS 5.4 | Google ChromeInappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a… | |
| CVE-2026-95359 | 29 Sep 2026 | CVSS 3.4 | Google ChromeUninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-95360 | 29 Sep 2026 | CVSS 5.3 | Google ChromeRace condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive… | |
| CVE-2026-95361 | 29 Sep 2026 | CVSS 4.3 | Google ChromeConfused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin… | |
| CVE-2026-95362 | 29 Sep 2026 | CVSS 8.8 | Google ChromeCross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web… | |
| CVE-2026-95363 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-95351 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-95352 | 29 Sep 2026 | CVSS 5.4 | Google ChromeIncorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web… | |
| CVE-2026-95353 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95354 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95355 | 29 Sep 2026 | CVSS 8.3 | Google ChromeIncorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-95356 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute… | |
| CVE-2026-95357 | 29 Sep 2026 | CVSS 9.6 | Google ChromeOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-95358 | 29 Sep 2026 | CVSS 4.4 | Google ChromeIncorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions… | |
| CVE-2026-95343 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95344 | 29 Sep 2026 | CVSS 8.0 | Google ChromeRace condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation… | |
| CVE-2026-95345 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95346 | 29 Sep 2026 | CVSS 4.8 | Google ChromeUI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network… | |
| CVE-2026-95347 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox… | |
| CVE-2026-95348 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95349 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-95350 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the… | |
| CVE-2026-95335 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95336 | 29 Sep 2026 | CVSS 6.5 | Google ChromeInformation leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95337 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to… | |
| CVE-2026-95338 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95339 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-95340 | 29 Sep 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass… | |
| CVE-2026-95341 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95342 | 29 Sep 2026 | CVSS 4.3 | Google ChromeMissing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page… | |
| CVE-2026-95327 | 29 Sep 2026 | CVSS 6.5 | Google ChromeInformation leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML… | |
| CVE-2026-95328 | 29 Sep 2026 | CVSS 6.5 | Google ChromeConfused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain… | |
| CVE-2026-95329 | 29 Sep 2026 | CVSS 9.6 | Google ChromeOut of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-95330 | 29 Sep 2026 | CVSS 6.5 | Google ChromeImproper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a… | |
| CVE-2026-95331 | 29 Sep 2026 | CVSS 9.6 | Google ChromeOut of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-95332 | 29 Sep 2026 | CVSS 4.7 | Google ChromeUse of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the… | |
| CVE-2026-95333 | 29 Sep 2026 | CVSS 8.1 | Google ChromeUse after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… | |
| CVE-2026-95334 | 29 Sep 2026 | CVSS 8.3 | Google ChromeIncorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-95318 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95319 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95320 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95321 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted… | |
| CVE-2026-95322 | 29 Sep 2026 | CVSS 8.3 | Google ChromeOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-95323 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof… | |
| CVE-2026-95324 | 29 Sep 2026 | CVSS 3.4 | Google ChromeUninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read… | |
| CVE-2026-95325 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95326 | 29 Sep 2026 | CVSS 8.4 | Google ChromeIncomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-95309 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-95310 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-95311 | 29 Sep 2026 | CVSS 9.6 | Google ChromeFree of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially… | |
| CVE-2026-95312 | 29 Sep 2026 | CVSS 3.1 | Google ChromeInformation leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain… | |
| CVE-2026-95313 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the… |
Page 139 of 168