Improper Restriction of Operations within Memory Buffer (CWE-119) — 402 disclosed vulnerabilities

Records the NVD classes as Improper Restriction of Operations within Memory Buffer (CWE-119), highest CVSS first.

CRITICAL 10CVE-2026-123966public PoC2026-11-07
A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possib…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-1202832026-11-02
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-120281public PoC2026-11-02
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-120189public PoC2026-11-01
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is po…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-116508public PoC2026-10-26
A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results …
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-798512026-10-22
Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating syste…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-798472026-10-22
Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to exec…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-114383public PoC2026-10-21
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The atta…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-114382public PoC2026-10-21
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is po…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-113744public PoC2026-10-21
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads t…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-1109582026-10-15
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made pub…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-109109public PoC2026-10-13
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-108892public PoC2026-10-12
A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newap_text_%d causes stack-based buffer overfl…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-105285public PoC2026-10-05
A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-bas…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-104610public PoC2026-10-02
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffe…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-101039public PoC2026-09-28
A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The explo…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-96257public PoC2026-09-23
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remote…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-94089public PoC2026-09-20
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer…
AI risk analysis on Exploit-DB.ai →
CRITICAL 10CVE-2026-94003public PoC2026-09-20
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initi…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-1239612026-11-07
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. Th…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-1239602026-11-07
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched rem…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-1239582026-11-07
A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch th…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-1239572026-11-07
A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploi…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-121600public PoC2026-11-04
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-bas…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-121599public PoC2026-11-04
A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/we…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-121598public PoC2026-11-04
A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stac…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-121597public PoC2026-11-04
A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can le…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-114268public PoC2026-10-21
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack r…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-109157public PoC2026-10-13
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-108915public PoC2026-10-12
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the p…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-108914public PoC2026-10-12
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The explo…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-108893public PoC2026-10-12
A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack may be launched remotely. The ex…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-105778public PoC2026-10-06
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It i…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-101038public PoC2026-09-28
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possi…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-101037public PoC2026-09-28
A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit ha…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-1007402026-09-27
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remot…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-941012026-09-21
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manipulation of the argument wan_num leads to buffer overflow. It is possible to initiat…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.9CVE-2026-941002026-09-21
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buff…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-124560public PoC2026-11-09
A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be init…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-798562026-10-22
A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify syste…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-767212026-09-29
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary c…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-101074public PoC2026-09-28
A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. Th…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-887772026-09-27
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befor…
netscaler application delivery controller · netscaler gateway
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-887762026-09-27
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before…
netscaler application delivery controller · netscaler gateway
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-968912026-09-24
A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads to out-of-bounds write. The attack may be initiated remote…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1212292026-11-03
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome · android
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1210742026-11-03
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · android
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1183402026-10-27
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1183122026-10-27
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1183062026-10-27
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1183052026-10-27
Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1133422026-10-20
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1133362026-10-20
Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1132832026-10-20
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · windows
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1132112026-10-20
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1131862026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1131712026-10-20
Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1131692026-10-20
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1131382026-10-20
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1131262026-10-20
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1130722026-10-20
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1130562026-10-20
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1130072026-10-20
Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1129922026-10-20
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1097402026-10-13
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1097082026-10-13
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-764642026-10-07
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internal…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-767452026-10-06
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1008192026-09-29
Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
firefox · thunderbird
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1007942026-09-29
Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-1007812026-09-29
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
firefox · thunderbird
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-101354public PoC2026-09-29
A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the loc…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1240602026-11-07
A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The …
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1240592026-11-07
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack ma…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1240582026-11-07
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotel…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1240572026-11-07
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated rem…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1239592026-11-07
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-104611public PoC2026-10-02
A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overf…
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-1007632026-09-29
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.1CVE-2026-101081public PoC2026-09-28
A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1205722026-11-03
Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159.0.1.
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-120232public PoC2026-11-01
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be …
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183592026-10-27
Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183582026-10-27
Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183522026-10-27
Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183512026-10-27
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183492026-10-27
Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183272026-10-27
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183202026-10-27
Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183172026-10-27
Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1183112026-10-27
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1126882026-10-26
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app ter…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133432026-10-20
Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133372026-10-20
Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133352026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133322026-10-20
Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133312026-10-20
Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133302026-10-20
Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113320public PoC2026-10-20
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · iphone os
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133182026-10-20
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133172026-10-20
Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · macos
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133152026-10-20
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133132026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133122026-10-20
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · macos
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133072026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133032026-10-20
Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1133012026-10-20
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132992026-10-20
Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132912026-10-20
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132882026-10-20
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132862026-10-20
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132852026-10-20
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · windows
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132842026-10-20
Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132812026-10-20
Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132802026-10-20
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132792026-10-20
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113276public PoC2026-10-20
Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132732026-10-20
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132722026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132692026-10-20
Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132682026-10-20
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · iphone os
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132672026-10-20
Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132662026-10-20
Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132652026-10-20
Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132602026-10-20
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132582026-10-20
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132572026-10-20
Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132542026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132482026-10-20
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132472026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132452026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113243public PoC2026-10-20
Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132422026-10-20
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · windows
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132412026-10-20
Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113238public PoC2026-10-20
Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132342026-10-20
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132322026-10-20
Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132262026-10-20
Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113220public PoC2026-10-20
Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132192026-10-20
Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132132026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1132062026-10-20
Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131942026-10-20
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131922026-10-20
Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131882026-10-20
Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131852026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131842026-10-20
Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131832026-10-20
Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131822026-10-20
Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131802026-10-20
Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131762026-10-20
Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131722026-10-20
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131672026-10-20
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131662026-10-20
Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131642026-10-20
Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131542026-10-20
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131532026-10-20
Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131522026-10-20
Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131502026-10-20
Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131492026-10-20
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131482026-10-20
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113146public PoC2026-10-20
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131452026-10-20
Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131432026-10-20
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131372026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131362026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131352026-10-20
Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131342026-10-20
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · windows
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131332026-10-20
Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131322026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131312026-10-20
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131272026-10-20
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131252026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131242026-10-20
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131212026-10-20
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113118public PoC2026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131102026-10-20
Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131092026-10-20
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131062026-10-20
Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131042026-10-20
Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1131002026-10-20
Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130962026-10-20
Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130942026-10-20
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130932026-10-20
Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130902026-10-20
Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130882026-10-20
Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130832026-10-20
Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130692026-10-20
Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130642026-10-20
Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130612026-10-20
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113059public PoC2026-10-20
Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130522026-10-20
Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130492026-10-20
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130482026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130362026-10-20
Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113034public PoC2026-10-20
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113032public PoC2026-10-20
Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113031public PoC2026-10-20
Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130272026-10-20
Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-113022public PoC2026-10-20
Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130182026-10-20
Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130132026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130082026-10-20
Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130052026-10-20
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130042026-10-20
Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130032026-10-20
Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1130002026-10-20
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1129982026-10-20
Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1129972026-10-20
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1129962026-10-20
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-112994public PoC2026-10-20
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1109202026-10-15
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1109142026-10-15
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1109132026-10-15
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1097622026-10-13
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1008142026-09-29
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
firefox · thunderbird
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1007822026-09-29
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
firefox · thunderbird
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1007642026-09-29
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-944242026-09-21
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-941462026-09-21
A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub_110BC of the file BSMEM64_W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition.…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-941422026-09-21
A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalA…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-941292026-09-21
A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where co…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-941282026-09-21
A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. L…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-18898public PoC2026-08-05
A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remot…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-18897public PoC2026-08-05
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-18895public PoC2026-08-05
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the …
AI risk analysis on Exploit-DB.ai →
HIGH 8.4CVE-2026-589752026-11-02
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AI risk analysis on Exploit-DB.ai →
HIGH 8.4CVE-2026-588242026-11-02
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AI risk analysis on Exploit-DB.ai →
HIGH 8.3CVE-2026-454502026-10-15
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versio…
AI risk analysis on Exploit-DB.ai →
HIGH 8.3CVE-2016-15060public PoC2026-10-14
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be u…
AI risk analysis on Exploit-DB.ai →
HIGH 8.3CVE-2026-93962public PoC2026-09-20
A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer…
AI risk analysis on Exploit-DB.ai →
HIGH 8.2CVE-2026-962652026-10-12
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbi…
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-798912026-10-22
A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful ex…
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-798892026-10-22
Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands …
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-798882026-10-22
A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, …
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1097542026-10-13
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1097532026-10-13
Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1097162026-10-13
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1097152026-10-13
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-840582026-10-08
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Coll…
guardium data protection
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-823442026-10-08
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buff…
guardium data protection
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-823352026-10-08
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, pote…
guardium data protection
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1007562026-09-29
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-887722026-09-27
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote…
netscaler application delivery controller · netscaler gateway
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-580052026-09-24
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-798922026-10-22
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-1060622026-10-06
A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for…
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-588152026-10-05
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-552862026-10-05
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-499372026-10-05
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati…
android
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-498802026-10-05
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-47550public PoC2026-09-30
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untrusted pointer that the driver dereferences without validation. A successful exploit of this vulnerability might lead to c…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-124563public PoC2026-11-09
A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launche…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-124562public PoC2026-11-09
A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remote…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-124561public PoC2026-11-09
A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be laun…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-121617public PoC2026-11-04
A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/upload_fw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched …
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-588532026-11-02
In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-120241public PoC2026-11-01
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to …
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-799552026-10-22
An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-798932026-10-22
Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-848752026-10-08
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-588652026-10-05
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation…
android
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-887792026-10-04
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
netscaler application delivery controller · netscaler gateway
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-100908public PoC2026-09-28
A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the …
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-124586public PoC2026-11-09
A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library include/rapidjson/internal/diyfp.h. This manipulation of the argument decimalPosition causes out-of-bounds read. It is possible to initiate…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-122146public PoC2026-11-05
A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes memory corruption. It is possible to initiate the attack remotely. The exploit has been made available…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-120337public PoC2026-11-02
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated rem…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-120336public PoC2026-11-02
A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The e…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-116620public PoC2026-10-27
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds …
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-1162602026-10-26
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The e…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-110679public PoC2026-10-14
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-1008882026-09-28
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h ca…
AI risk analysis on Exploit-DB.ai →
HIGH 7.3CVE-2026-92399public PoC2026-09-16
A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the file src/utils/rmt_ws.c of the component WebSocket Handler. Executing a manipulation of the argument payload_size can lead to heap-based buffer overflow…
AI risk analysis on Exploit-DB.ai →
HIGH 7.2CVE-2026-957072026-10-22
A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on …
AI risk analysis on Exploit-DB.ai →
HIGH 7.2CVE-2026-108906public PoC2026-10-12
A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the argument put_file leads to out-of-bounds read. It is possible to initiate the att…
AI risk analysis on Exploit-DB.ai →
HIGH 7.1CVE-2026-957102026-10-22
An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt…
AI risk analysis on Exploit-DB.ai →
HIGH 7.1CVE-2026-47602public PoC2026-09-30
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and infor…
AI risk analysis on Exploit-DB.ai →
HIGH 7CVE-2026-957132026-10-22
An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modifi…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.8CVE-2026-957142026-10-22
A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged use…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.8CVE-2026-569362026-10-06
In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-589772026-11-02
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-957302026-11-03
A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected system.
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133412026-10-20
Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
chrome · android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133402026-10-20
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · windows
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133332026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133262026-10-20
Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · windows
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133252026-10-20
Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · iphone os
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1133222026-10-20
Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113304public PoC2026-10-20
Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132962026-10-20
Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132462026-10-20
Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · iphone os
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132372026-10-20
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132252026-10-20
Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113224public PoC2026-10-20
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132232026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113209public PoC2026-10-20
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · iphone os
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1132012026-10-20
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1131932026-10-20
Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1131782026-10-20
Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · macos
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113144public PoC2026-10-20
Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113142public PoC2026-10-20
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113139public PoC2026-10-20
Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1131222026-10-20
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130982026-10-20
Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130822026-10-20
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome · windows
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-113077public PoC2026-10-20
Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · macos
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130662026-10-20
Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130512026-10-20
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130472026-10-20
Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130382026-10-20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130262026-10-20
Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome · android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-1130022026-10-20
Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-112373public PoC2026-10-20
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-552652026-10-05
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-124996public PoC2026-11-09
A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-124994public PoC2026-11-09
A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3. The affected element is the function ngram_dequant of the file exllamav3/exllamav3_ext/ngram.cu of the component NGramEmbedding. The manipulation of the argument head_bias results in o…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-122189public PoC2026-11-05
A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/opt_graph.cc of the component CUDA Optimizer. Such ma…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1164632026-10-26
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1162582026-10-26
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly availab…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1161242026-10-26
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The atta…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-116099public PoC2026-10-26
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be ex…
scp\
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-112108public PoC2026-10-19
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-112107public PoC2026-10-19
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflo…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-112073public PoC2026-10-19
A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-110698public PoC2026-10-14
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The a…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-110695public PoC2026-10-14
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer o…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-110694public PoC2026-10-14
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root lea…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-109827public PoC2026-10-13
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely.…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-108954public PoC2026-10-13
A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Searc…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-108539public PoC2026-10-11
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is no…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-108538public PoC2026-10-11
A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit ha…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1060672026-10-07
A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and related) arithmetic while the filter’s pixel access path uses the true image size, after …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1060662026-10-07
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1060652026-10-07
A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overf…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1071252026-10-07
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to ver…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1060642026-10-07
A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1060632026-10-06
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width * height (and bytes-per-pixel) product that can overflow. GEGL then wr…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-105251public PoC2026-10-05
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-105248public PoC2026-10-05
A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the file src/meta/txtp_parser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched r…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-103227public PoC2026-09-30
A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_url of the file src/media_tools/dash_client.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carr…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1032262026-09-30
A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the atta…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1012052026-09-28
A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disc…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1012042026-09-28
A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was con…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1012032026-09-28
A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted ear…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1012022026-09-28
A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out-of-bounds write. It is possible to launch the attack remotely. The vendor was co…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-1007452026-09-27
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer …
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-96676public PoC2026-09-23
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicl…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.3CVE-2026-92880public PoC2026-09-17
A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcm_read_coefs_be of the file src/coding/vadpcm_decoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote e…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.2CVE-2026-590102026-11-02
In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.1CVE-2026-1139072026-10-26
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.8CVE-2026-201972026-10-21
Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vul…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2025-60497public PoC2026-10-21
A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2025-60475public PoC2026-10-20
A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-653962026-10-20
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2025-55667public PoC2026-10-19
A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-112094public PoC2026-10-19
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been di…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-796072026-10-13
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstor…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-1085732026-10-11
A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-286672026-10-05
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
android
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-103531public PoC2026-10-01
A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be la…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.4CVE-2026-1162622026-10-26
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is po…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.4CVE-2026-1097312026-10-13
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.4CVE-2026-1097212026-10-13
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.4CVE-2026-1097142026-10-13
Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-121616public PoC2026-11-04
A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/mesh_login.cgi of the component JSON Request Parser. The manipulation of the argument username/password/token/source/cn/action …
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-1162592026-10-26
A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afc_get_device_info_key of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory c…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-116096public PoC2026-10-25
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds w…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-115801public PoC2026-10-23
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/cl…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-108960public PoC2026-10-13
A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader. The manipulat…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-108955public PoC2026-10-13
A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_offset causes out-of-boun…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-108822public PoC2026-10-12
A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The manipulation of the argument length results in buffer overflow. …
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-101003public PoC2026-09-28
A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The a…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-100892public PoC2026-09-28
A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption.…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-18785public PoC2026-08-04
A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of the file examples/custom_datatype/client_types_custom.c. Executing a manipulation can lead to use after free. It i…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-18784public PoC2026-08-04
A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requir…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.1CVE-2026-842902026-10-08
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception han…
guardium data protection · windows
AI risk analysis on Exploit-DB.ai →
MEDIUM 5CVE-2026-121517public PoC2026-11-03
A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIFF Wang Annotation Handler. Performing a manipulation results in heap-based buffer overflow. The attack is possible to be…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.8CVE-2026-105249public PoC2026-10-05
A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.8CVE-2026-767342026-09-29
A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of …
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.4CVE-2026-116502public PoC2026-10-26
A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.4CVE-2026-957202026-10-22
A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual i…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1183222026-10-27
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1183192026-10-27
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1124712026-10-26
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.
macos
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1120362026-10-19
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. T…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1109182026-10-15
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-1109172026-10-15
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
chrome
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-105775public PoC2026-10-06
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4CVE-2026-589882026-11-02
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
AI risk analysis on Exploit-DB.ai →
LOW 3.5CVE-2026-123268public PoC2026-11-06
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the component Extent Data File Ha…
AI risk analysis on Exploit-DB.ai →
LOW 3.5CVE-2026-1162612026-10-26
A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of the file src/afc.c of the component AFC File Handler. The manipulation of the argument bytes leads to out-of-bounds read. It is possible to in…
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-123269public PoC2026-11-06
A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds …
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-120226public PoC2026-11-01
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer…
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-957212026-10-22
A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected …
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-588562026-10-05
In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not ne…
android
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-767362026-09-29
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service.
AI risk analysis on Exploit-DB.ai →
LOW 3.3CVE-2026-18790public PoC2026-08-04
A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the component DeleteMonitoredItemsRequ…
AI risk analysis on Exploit-DB.ai →
LOW 2.8CVE-2026-110810public PoC2026-10-15
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack …
AI risk analysis on Exploit-DB.ai →
LOW 2.7CVE-2026-105164public PoC2026-10-04
A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull req…
AI risk analysis on Exploit-DB.ai →
LOW 2.7CVE-2026-767382026-09-29
A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the nor…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-1132122026-10-20
Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. (Chromium security severity: High)
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-1074062026-10-08
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: …
AI risk analysis on Exploit-DB.ai →