[ Latest · 16,702 CVEs ]

Newly published CVEs.

Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-83385 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle HRMS (US)Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…
CVE-2026-83386 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle HRMS (US)Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…
CVE-2026-83367 20 Oct 2026 CVSS 7.4 Oracle Corporation Oracle Shipping ExecutionVulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected…
CVE-2026-83370 20 Oct 2026 CVSS 7.5 Oracle Corporation SourcingVulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15…
CVE-2026-83371 20 Oct 2026 CVSS 5.4 Oracle Corporation Oracle HRMS (UK)Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…
CVE-2026-83372 20 Oct 2026 CVSS 5.4 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are…
CVE-2026-83373 20 Oct 2026 CVSS 3.0 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are…
CVE-2026-83374 20 Oct 2026 CVSS 5.9 Oracle Corporation Oracle Java SEVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)…
CVE-2026-83375 20 Oct 2026 CVSS 6.0 Oracle Corporation PeopleSoft Enterprise HCM Human ResourcesVulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version…
CVE-2026-83376 20 Oct 2026 CVSS 3.7 Oracle Corporation Oracle Java SEVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported…
CVE-2026-83377 20 Oct 2026 CVSS 5.4 Oracle Corporation Oracle HRMS (US)Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported versions that are affected are…
CVE-2026-82891 20 Oct 2026 CVSS 8.1 IBM Guardium Data ProtectionIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic…
CVE-2026-83139 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle Order ManagementVulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are…
CVE-2026-83358 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle HRMS (Norway)Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…
CVE-2026-83359 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle HRMS (India)Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are…
CVE-2026-83360 20 Oct 2026 CVSS 6.5 Oracle Corporation Oracle HRMS (Republic of Korea)Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are…
CVE-2026-83361 20 Oct 2026 CVSS 8.1 Oracle Corporation Oracle Contract Lifecycle Management for Public SectorVulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported…
CVE-2026-83363 20 Oct 2026 CVSS 8.8 Oracle Corporation Oracle Contract Lifecycle Management for Public SectorVulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported…
CVE-2026-83366 20 Oct 2026 CVSS 7.4 Oracle Corporation Oracle Shipping ExecutionVulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected…
CVE-2026-81212 20 Oct 2026 CVSS 10.0 IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key…
CVE-2026-76587 20 Oct 2026 CVSS 8.8 IBM Planning AnalyticsIBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow…
CVE-2026-70860 20 Oct 2026 CVSS 5.9 Oracle Corporation PeopleSoft Enterprise FIN Common Objects ArgentinaVulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version…
CVE-2026-70869 20 Oct 2026 CVSS 4.7 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are…
CVE-2026-73964 20 Oct 2026 CVSS 2.7 Oracle Corporation Oracle Database ServerVulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily…
CVE-2026-60881 20 Oct 2026 CVSS 6.5 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). Supported versions that are affected are…
CVE-2026-60882 20 Oct 2026 CVSS 5.3 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are…
CVE-2026-60885 20 Oct 2026 CVSS 6.8 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are…
CVE-2026-60887 20 Oct 2026 CVSS 3.8 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are…
CVE-2026-60964 20 Oct 2026 CVSS 1.9 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are…
CVE-2026-60968 20 Oct 2026 CVSS 6.0 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that…
CVE-2026-60809 20 Oct 2026 CVSS 4.2 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are…
CVE-2026-60814 20 Oct 2026 CVSS 3.9 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are…
CVE-2026-60819 20 Oct 2026 CVSS 3.7 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that…
CVE-2026-60839 20 Oct 2026 CVSS 5.5 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61…
CVE-2026-60869 20 Oct 2026 CVSS 6.8 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions that are…
CVE-2026-60874 20 Oct 2026 CVSS 4.2 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are…
CVE-2026-60876 20 Oct 2026 CVSS 4.2 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version that is…
CVE-2026-60878 20 Oct 2026 CVSS 4.4 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are…
CVE-2026-47025 20 Oct 2026 CVSS 8.8 Oracle Corporation Oracle SolarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily…
CVE-2026-60432 20 Oct 2026 CVSS 9.8 Oracle Corporation Oracle SolarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and…
CVE-2026-60453 20 Oct 2026 CVSS 5.3 Oracle Corporation Oracle SolarisVulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily…
CVE-2026-60500 20 Oct 2026 CVSS 5.8 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are…
CVE-2026-60662 20 Oct 2026 CVSS 7.8 Oracle Corporation Oracle SolarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily…
CVE-2026-60743 20 Oct 2026 CVSS 6.5 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are…
CVE-2026-60745 20 Oct 2026 CVSS 4.4 Oracle Corporation PeopleSoft Enterprise PeopleToolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that…
CVE-2026-60746 20 Oct 2026 CVSS 5.9 Oracle Corporation Oracle Order ManagementVulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are…
CVE-2026-113730 20 Oct 2026 CVSS 5.6 OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxiesOGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the… Fix
CVE-2026-113731 20 Oct 2026 CVSS 3.3 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tooldjust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4… Fix
CVE-2026-113732 20 Oct 2026 CVSS 7.8 virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotevirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which… Fix
CVE-2026-113776 20 Oct 2026 CVSS 7.8 virtualenv activation scripts run code from a path that contains a placeholder namevirtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template()… Fix
CVE-2026-113812 20 Oct 2026 Not scored yet VulnerabilityMozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle…
CVE-2026-113343 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113344 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113704 20 Oct 2026 CVSS 7.3 a2aproject a2a-rsA vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file…
CVE-2026-113726 20 Oct 2026 CVSS 7.8 virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the… Fix
CVE-2026-113727 20 Oct 2026 CVSS 7.4 OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runsOpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route… Fix
CVE-2026-113728 20 Oct 2026 CVSS 7.5 bulwarkmail webmailBulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates…
CVE-2026-113729 20 Oct 2026 CVSS 7.5 Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalizationMoov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go… Fix
CVE-2026-113335 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113336 20 Oct 2026 CVSS 9.6 Google ChromeMemory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-113337 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113338 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113339 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113340 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…
CVE-2026-113341 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…
CVE-2026-113342 20 Oct 2026 CVSS 9.6 Google ChromeMemory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a…
CVE-2026-113326 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…
CVE-2026-113327 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113328 20 Oct 2026 CVSS 9.6 Google ChromeImproper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside…
CVE-2026-113329 20 Oct 2026 CVSS 6.5 Google ChromeOut of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…
CVE-2026-113330 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113331 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113332 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113333 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…
CVE-2026-113334 20 Oct 2026 CVSS 8.8 Google ChromeImproper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary…
CVE-2026-113317 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113318 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via…
CVE-2026-113319 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113320 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113321 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113322 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…
CVE-2026-113323 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113324 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113325 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox…
CVE-2026-113308 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113309 20 Oct 2026 CVSS 6.5 Google ChromeOut of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML…
CVE-2026-113310 20 Oct 2026 CVSS 6.5 Google ChromeOut of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted…
CVE-2026-113311 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113312 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113313 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113314 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113315 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-113316 20 Oct 2026 CVSS 8.8 Google ChromeImproper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via…
CVE-2026-113299 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113300 20 Oct 2026 CVSS 9.6 Google ChromeOut of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-113301 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-113302 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113303 20 Oct 2026 CVSS 8.8 Google ChromeMemory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113304 20 Oct 2026 CVSS 6.5 Google ChromeMemory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…
CVE-2026-113305 20 Oct 2026 CVSS 8.8 Google ChromeUse after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
Page 17 of 168