|
941
|
8.3 |
HIGH
Network
|
-
|
-
|
Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.…
New
|
CWE-472
External Control of Assumed-Immutable Web Parameter
|
CVE-2026-11640
|
2026-06-9 23:16 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
942
|
8.8 |
HIGH
Network
|
-
|
-
|
Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of user input for git shell commands directly invoked with exe…
New
|
CWE-78
CWE-77
OS Command
Command Injection
|
CVE-2026-11572
|
2026-06-9 23:16 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
943
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Update
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-11288
|
2026-06-9 22:59 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
944
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Update
|
CWE-1300
CWE-203
Improper Protection of Physical Side Channels
Information Exposure Through Discrepancy
|
CVE-2026-11289
|
2026-06-9 22:58 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
945
|
7.5 |
HIGH
Network
|
-
|
-
|
Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulne…
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-36789
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
946
|
6.5 |
MEDIUM
Network
|
-
|
-
|
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account c…
New
|
CWE-348
Use of Less Trusted Source
|
CVE-2020-37248
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
947
|
7.5 |
HIGH
Network
|
-
|
-
|
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.
By creating resources of certain types and presenting a set of parameters t…
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-22164
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
948
|
7.1 |
HIGH
Local
|
-
|
-
|
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation.
The product accidenta…
New
|
CWE-468
|
CVE-2026-34194
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
949
|
7.5 |
HIGH
Network
|
-
|
-
|
Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to ca…
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-36786
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
950
|
8.8 |
HIGH
Network
|
-
|
-
|
Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically del…
New
|
CWE-285
CWE-613
Improper Authorization
Insufficient Session Expiration
|
CVE-2026-46656
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
