LOW3.1CVE-2026-12017Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the rende…
HIGH8.3Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the rendere…
HIGH8.3Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a s…
HIGH8.8Use after free in Media in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruptio…
HIGH8.1Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially expl…
HIGH8.3Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pr…
HIGH8.3Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer…
HIGH8.3Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who h…
HIGH8.3Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pr…
HIGH8.8Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafte…
HIGH7.3Vim is an open source, command line text editor.
HIGH7.5Vim is an open source, command line text editor.
HIGH8.8Vim is an open source, command line text editor.
HIGH7.2GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
HIGH7.5Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds
HIGH7.1WsgiDAV encoded dot segments can escape filesystem share roots
HIGH7.6An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).
HIGH8.1Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/fil…
HIGH7.5@grpc/grpc-js: A malformed request can cause a server crash
HIGH7.5@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
HIGH8.8OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
HIGH8.7kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-…
HIGH8.8A flaw was found in dracut.
HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images.
HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images.