|
1311
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Hi…
Update
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-10944
|
2026-06-9 02:07 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1312
|
7.8 |
HIGH
Local
|
google
|
chrome
|
Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
Update
|
CWE-20
NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-10942
|
2026-06-9 02:04 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1313
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (…
Update
|
CWE-362
Race Condition
|
CVE-2026-10940
|
2026-06-9 02:04 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1314
|
7.8 |
HIGH
Local
|
x.org
redhat
|
x_server
xwayland
enterprise_linux
|
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify o…
Update
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-50258
|
2026-06-9 01:46 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1315
|
7.8 |
HIGH
Local
|
x.org
redhat
|
x_server
xwayland
enterprise_linux
|
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attack…
Update
|
CWE-416
Use After Free
|
CVE-2026-50257
|
2026-06-9 01:45 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1316
|
7.8 |
HIGH
Local
|
x.org
redhat
|
x_server
xwayland
enterprise_linux
|
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow…
Update
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-50256
|
2026-06-9 01:45 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1317
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Update
|
CWE-346
Origin Validation Error
|
CVE-2026-11309
|
2026-06-9 01:40 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1318
|
6.5 |
MEDIUM
Network
|
team
|
net\
|
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections.
The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj…
Update
|
CWE-93
CRLF Injection
|
CVE-2026-8722
|
2026-06-9 01:39 |
2026-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1319
|
7.7 |
HIGH
Local
|
google
|
chrome
|
Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium…
Update
|
CWE-20
Improper Input Validation
|
CVE-2026-11297
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1320
|
7.5 |
HIGH
Network
|
rrwo
|
net\
|
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.
The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network range…
Update
|
CWE-674
CWE-1287
Uncontrolled Recursion
Improper Validation of Specified Type of Input
|
CVE-2026-49941
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
