Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 7 are already weaponised in the wild.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85046
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — | |
| v8 | affected | — | — |
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85046
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87491
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVEs:CVE-2026-85880
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVEs:CVE-2026-85880
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2026-58704
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
TuxCare security update for org.apache.logging.log4j (2 CVEs)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| org.apache.logging.log4j:log4j | affected | TuxCare:Maven | org.apache.logging.log4j:log4j | — |
| org.apache.logging.log4j:log4j-1.2-api | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-1.2-api | — |
| org.apache.logging.log4j:log4j-api | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-api | — |
| org.apache.logging.log4j:log4j-appserver | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-appserver | — |
| org.apache.logging.log4j:log4j-bom | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-bom | — |
| org.apache.logging.log4j:log4j-cassandra | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-cassandra | — |
| org.apache.logging.log4j:log4j-core | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-core | — |
| org.apache.logging.log4j:log4j-couchdb | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-couchdb | — |
| org.apache.logging.log4j:log4j-docker | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-docker | — |
| org.apache.logging.log4j:log4j-flume-ng | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-flume-ng | — |
| org.apache.logging.log4j:log4j-iostreams | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-iostreams | — |
| org.apache.logging.log4j:log4j-jakarta-web | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jakarta-web | — |
| org.apache.logging.log4j:log4j-jcl | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jcl | — |
| org.apache.logging.log4j:log4j-jdbc-dbcp2 | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jdbc-dbcp2 | — |
| org.apache.logging.log4j:log4j-jmx-gui | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jmx-gui | — |
| org.apache.logging.log4j:log4j-jpa | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jpa | — |
| org.apache.logging.log4j:log4j-jpl | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jpl | — |
| org.apache.logging.log4j:log4j-jul | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-jul | — |
| org.apache.logging.log4j:log4j-kubernetes | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-kubernetes | — |
| org.apache.logging.log4j:log4j-layout-template-json | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-layout-template-json | — |
| org.apache.logging.log4j:log4j-liquibase | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-liquibase | — |
| org.apache.logging.log4j:log4j-mongodb3 | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-mongodb3 | — |
| org.apache.logging.log4j:log4j-mongodb4 | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-mongodb4 | — |
| org.apache.logging.log4j:log4j-osgi | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-osgi | — |
| org.apache.logging.log4j:log4j-slf4j18-impl | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-slf4j18-impl | — |
| org.apache.logging.log4j:log4j-slf4j-impl | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-slf4j-impl | — |
| org.apache.logging.log4j:log4j-spring-boot | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-spring-boot | — |
| org.apache.logging.log4j:log4j-spring-cloud-config | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-spring-cloud-config | — |
| org.apache.logging.log4j:log4j-spring-cloud-config-client | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-spring-cloud-config-client | — |
| org.apache.logging.log4j:log4j-taglib | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-taglib | — |
| org.apache.logging.log4j:log4j-to-slf4j | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-to-slf4j | — |
| org.apache.logging.log4j:log4j-web | affected | TuxCare:Maven | org.apache.logging.log4j:log4j-web | — |
TuxCare security update for firebase/php-jwt (1 CVE)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php-jwt | affected | firebase | firebase/php-jwt | — |
TuxCare security update for protobuf (1 CVE)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| protobuf | affected | TuxCare:PyPI | protobuf | — |
Important: golang-github-openprinting-ipp-usb security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-openprinting-ipp-usb | affected | Rocky Linux:10 | golang-github-openprinting-ipp-usb | — |
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saas_upload_logo() function combined with an auth...
CVEs:CVE-2026-75865
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| WPLP Cookie Consent | affected | WordPress | — | — |
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode (gdpr-cookie-consent) | affected | wplegalpages | — | — |
MINI-2cgw-w5mh-ww2r
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-4hhx-mcvw-w5x6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sdk-core | affected | MinimOS | google-cloud-sdk-core | — |
MINI-4jch-224p-m4c8
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sdk-core | affected | MinimOS | google-cloud-sdk-core | — |
MINI-45wm-jc6h-wcph
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-4423-mf5w-88cp
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sdk-core | affected | MinimOS | google-cloud-sdk-core | — |
Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87492
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85048
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-0159
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85045
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3qph-pgr9-fc22
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ceph-20.2 | affected | MinimOS | ceph-20.2 | — |
| ceph-20.2-base | affected | MinimOS | ceph-20.2-base | — |
| ceph-20.2-cephadm | affected | MinimOS | ceph-20.2-cephadm | — |
| ceph-20.2-common | affected | MinimOS | ceph-20.2-common | — |
| ceph-20.2-dev | affected | MinimOS | ceph-20.2-dev | — |
| ceph-20.2-doc | affected | MinimOS | ceph-20.2-doc | — |
| ceph-20.2-exporter | affected | MinimOS | ceph-20.2-exporter | — |
| ceph-20.2-fuse | affected | MinimOS | ceph-20.2-fuse | — |
| ceph-20.2-immutable-object-cache | affected | MinimOS | ceph-20.2-immutable-object-cache | — |
| ceph-20.2-libcephfs | affected | MinimOS | ceph-20.2-libcephfs | — |
| ceph-20.2-librados | affected | MinimOS | ceph-20.2-librados | — |
| ceph-20.2-librbd | affected | MinimOS | ceph-20.2-librbd | — |
| ceph-20.2-librgw | affected | MinimOS | ceph-20.2-librgw | — |
| ceph-20.2-libs | affected | MinimOS | ceph-20.2-libs | — |
| ceph-20.2-mds | affected | MinimOS | ceph-20.2-mds | — |
| ceph-20.2-mgr | affected | MinimOS | ceph-20.2-mgr | — |
| ceph-20.2-mgr-cephadm | affected | MinimOS | ceph-20.2-mgr-cephadm | — |
| ceph-20.2-mgr-dashboard | affected | MinimOS | ceph-20.2-mgr-dashboard | — |
| ceph-20.2-mgr-diskprediction-local | affected | MinimOS | ceph-20.2-mgr-diskprediction-local | — |
| ceph-20.2-mgr-k8sevents | affected | MinimOS | ceph-20.2-mgr-k8sevents | — |
| ceph-20.2-mgr-rook | affected | MinimOS | ceph-20.2-mgr-rook | — |
| ceph-20.2-mirror | affected | MinimOS | ceph-20.2-mirror | — |
| ceph-20.2-mon | affected | MinimOS | ceph-20.2-mon | — |
| ceph-20.2-osd | affected | MinimOS | ceph-20.2-osd | — |
| ceph-20.2-python | affected | MinimOS | ceph-20.2-python | — |
| ceph-20.2-radosgw | affected | MinimOS | ceph-20.2-radosgw | — |
| ceph-20.2-test | affected | MinimOS | ceph-20.2-test | — |
| py3.10-ceph-20.2-ceph-argparse | affected | MinimOS | py3.10-ceph-20.2-ceph-argparse | — |
| py3.10-ceph-20.2-ceph-common | affected | MinimOS | py3.10-ceph-20.2-ceph-common | — |
| py3.10-ceph-20.2-cephfs | affected | MinimOS | py3.10-ceph-20.2-cephfs | — |
| py3.10-ceph-20.2-rados | affected | MinimOS | py3.10-ceph-20.2-rados | — |
| py3.10-ceph-20.2-rbd | affected | MinimOS | py3.10-ceph-20.2-rbd | — |
| py3.10-ceph-20.2-rgw | affected | MinimOS | py3.10-ceph-20.2-rgw | — |
| py3.11-ceph-20.2-ceph-argparse | affected | MinimOS | py3.11-ceph-20.2-ceph-argparse | — |
| py3.11-ceph-20.2-ceph-common | affected | MinimOS | py3.11-ceph-20.2-ceph-common | — |
| py3.11-ceph-20.2-cephfs | affected | MinimOS | py3.11-ceph-20.2-cephfs | — |
| py3.11-ceph-20.2-rados | affected | MinimOS | py3.11-ceph-20.2-rados | — |
| py3.11-ceph-20.2-rbd | affected | MinimOS | py3.11-ceph-20.2-rbd | — |
| py3.11-ceph-20.2-rgw | affected | MinimOS | py3.11-ceph-20.2-rgw | — |
| py3.12-ceph-20.2-ceph-argparse | affected | MinimOS | py3.12-ceph-20.2-ceph-argparse | — |
| py3.12-ceph-20.2-ceph-common | affected | MinimOS | py3.12-ceph-20.2-ceph-common | — |
| py3.12-ceph-20.2-cephfs | affected | MinimOS | py3.12-ceph-20.2-cephfs | — |
| py3.12-ceph-20.2-rados | affected | MinimOS | py3.12-ceph-20.2-rados | — |
| py3.12-ceph-20.2-rbd | affected | MinimOS | py3.12-ceph-20.2-rbd | — |
| py3.12-ceph-20.2-rgw | affected | MinimOS | py3.12-ceph-20.2-rgw | — |
| py3.13-ceph-20.2-ceph-argparse | affected | MinimOS | py3.13-ceph-20.2-ceph-argparse | — |
| py3.13-ceph-20.2-ceph-common | affected | MinimOS | py3.13-ceph-20.2-ceph-common | — |
| py3.13-ceph-20.2-cephfs | affected | MinimOS | py3.13-ceph-20.2-cephfs | — |
| py3.13-ceph-20.2-rados | affected | MinimOS | py3.13-ceph-20.2-rados | — |
| py3.13-ceph-20.2-rbd | affected | MinimOS | py3.13-ceph-20.2-rbd | — |
| py3.13-ceph-20.2-rgw | affected | MinimOS | py3.13-ceph-20.2-rgw | — |
| py3-supported-ceph-20.2-ceph-argparse | affected | MinimOS | py3-supported-ceph-20.2-ceph-argparse | — |
| py3-supported-ceph-20.2-ceph-common | affected | MinimOS | py3-supported-ceph-20.2-ceph-common | — |
| py3-supported-ceph-20.2-cephfs | affected | MinimOS | py3-supported-ceph-20.2-cephfs | — |
| py3-supported-ceph-20.2-rados | affected | MinimOS | py3-supported-ceph-20.2-rados | — |
| py3-supported-ceph-20.2-rbd | affected | MinimOS | py3-supported-ceph-20.2-rbd | — |
| py3-supported-ceph-20.2-rgw | affected | MinimOS | py3-supported-ceph-20.2-rgw | — |
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87575
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...
CVEs:CVE-2026-49881
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28668
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...
CVEs:CVE-2026-0084
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User exec...
CVEs:CVE-2026-0065
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interac...
CVEs:CVE-2026-0054
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| afterburn | affected | Red Hat:openshift:4.4::el8 | afterburn | — |
| afterburn-debuginfo | affected | Red Hat:openshift:4.4::el8 | afterburn-debuginfo | — |
| ansible-asb-modules | affected | Red Hat:openshift:4.4::el7 | ansible-asb-modules | — |
| ansible-kubernetes-modules | affected | Red Hat:openshift:4.4::el7 | ansible-kubernetes-modules | — |
| ansible-runner | affected | Red Hat:openshift:4.4::el7 | ansible-runner | — |
| ansible-runner-http | affected | Red Hat:openshift:4.4::el7 | ansible-runner-http | — |
| apb | affected | Red Hat:openshift:4.4::el7 | apb | — |
| apb-base-scripts | affected | Red Hat:openshift:4.4::el7 | apb-base-scripts | — |
| apb-container-scripts | affected | Red Hat:openshift:4.4::el7 | apb-container-scripts | — |
| apb-devel | affected | Red Hat:openshift:4.4::el7 | apb-devel | — |
| atomic-enterprise-service-catalog | affected | Red Hat:openshift:4.4::el7 | atomic-enterprise-service-catalog | — |
| atomic-enterprise-service-catalog-svcat | affected | Red Hat:openshift:4.4::el7 | atomic-enterprise-service-catalog-svcat | — |
| atomic-openshift-service-idler | affected | Red Hat:openshift:4.4::el7 | atomic-openshift-service-idler | — |
| buildah | affected | Red Hat:openshift:4.4::el8 | buildah | — |
| buildah-debuginfo | affected | Red Hat:openshift:4.4::el8 | buildah-debuginfo | — |
| buildah-debugsource | affected | Red Hat:openshift:4.4::el8 | buildah-debugsource | — |
| buildah-tests | affected | Red Hat:openshift:4.4::el8 | buildah-tests | — |
| buildah-tests-debuginfo | affected | Red Hat:openshift:4.4::el8 | buildah-tests-debuginfo | — |
| conmon | affected | Red Hat:openshift:4.4::el7 | conmon | — |
| conmon | affected | Red Hat:openshift:4.4::el8 | conmon | — |
| console-login-helper-messages | affected | Red Hat:openshift:4.4::el8 | console-login-helper-messages | — |
| console-login-helper-messages-issuegen | affected | Red Hat:openshift:4.4::el8 | console-login-helper-messages-issuegen | — |
| console-login-helper-messages-profile | affected | Red Hat:openshift:4.4::el8 | console-login-helper-messages-profile | — |
| containernetworking-plugins | affected | Red Hat:openshift:4.4::el7 | containernetworking-plugins | — |
| containernetworking-plugins | affected | Red Hat:openshift:4.4::el8 | containernetworking-plugins | — |
| containernetworking-plugins-debuginfo | affected | Red Hat:openshift:4.4::el7 | containernetworking-plugins-debuginfo | — |
| containernetworking-plugins-debuginfo | affected | Red Hat:openshift:4.4::el8 | containernetworking-plugins-debuginfo | — |
| containernetworking-plugins-debugsource | affected | Red Hat:openshift:4.4::el8 | containernetworking-plugins-debugsource | — |
| containers-common | affected | Red Hat:openshift:4.4::el8 | containers-common | — |
| containers-common | affected | Red Hat:openshift:4.4::el7 | containers-common | — |
| coreos-installer | affected | Red Hat:openshift:4.4::el8 | coreos-installer | — |
| coreos-installer-dracut | affected | Red Hat:openshift:4.4::el8 | coreos-installer-dracut | — |
| cri-tools | affected | Red Hat:openshift:4.4::el8 | cri-tools | — |
| cri-tools | affected | Red Hat:openshift:4.4::el7 | cri-tools | — |
| cri-tools-debuginfo | affected | Red Hat:openshift:4.4::el7 | cri-tools-debuginfo | — |
| cri-tools-debuginfo | affected | Red Hat:openshift:4.4::el8 | cri-tools-debuginfo | — |
| cri-tools-debugsource | affected | Red Hat:openshift:4.4::el8 | cri-tools-debugsource | — |
| dracut | affected | Red Hat:openshift:4.4::el8 | dracut | — |
| dracut-caps | affected | Red Hat:openshift:4.4::el8 | dracut-caps | — |
| dracut-config-generic | affected | Red Hat:openshift:4.4::el8 | dracut-config-generic | — |
| dracut-config-rescue | affected | Red Hat:openshift:4.4::el8 | dracut-config-rescue | — |
| dracut-debuginfo | affected | Red Hat:openshift:4.4::el8 | dracut-debuginfo | — |
| dracut-debugsource | affected | Red Hat:openshift:4.4::el8 | dracut-debugsource | — |
| dracut-live | affected | Red Hat:openshift:4.4::el8 | dracut-live | — |
| dracut-network | affected | Red Hat:openshift:4.4::el8 | dracut-network | — |
| dracut-squash | affected | Red Hat:openshift:4.4::el8 | dracut-squash | — |
| dracut-tools | affected | Red Hat:openshift:4.4::el8 | dracut-tools | — |
| dumb-init | affected | Red Hat:openshift:4.4::el7 | dumb-init | — |
| dumb-init-debuginfo | affected | Red Hat:openshift:4.4::el7 | dumb-init-debuginfo | — |
| elastic-curator | affected | Red Hat:openshift:4.4::el7 | elastic-curator | — |
| faq | affected | Red Hat:openshift:4.4::el7 | faq | — |
| faq-debuginfo | affected | Red Hat:openshift:4.4::el7 | faq-debuginfo | — |
| fb303 | affected | Red Hat:openshift:4.4::el7 | fb303 | — |
| fb303-devel | affected | Red Hat:openshift:4.4::el7 | fb303-devel | — |
| fb303-java | affected | Red Hat:openshift:4.4::el7 | fb303-java | — |
| fuse-overlayfs | affected | Red Hat:openshift:4.4::el7 | fuse-overlayfs | — |
| fuse-overlayfs-debuginfo | affected | Red Hat:openshift:4.4::el7 | fuse-overlayfs-debuginfo | — |
| golang-github-prometheus-promu | affected | Red Hat:openshift:4.4::el7 | golang-github-prometheus-promu | — |
| golang-scl-shim | affected | Red Hat:openshift:4.4::el7 | golang-scl-shim | — |
| gperftools | affected | Red Hat:openshift:4.4::el8 | gperftools | — |
| gperftools-debugsource | affected | Red Hat:openshift:4.4::el8 | gperftools-debugsource | — |
| gperftools-devel | affected | Red Hat:openshift:4.4::el8 | gperftools-devel | — |
| gperftools-libs | affected | Red Hat:openshift:4.4::el8 | gperftools-libs | — |
| gperftools-libs-debuginfo | affected | Red Hat:openshift:4.4::el8 | gperftools-libs-debuginfo | — |
| grpc | affected | Red Hat:openshift:4.4::el8 | grpc | — |
| grpc-cli | affected | Red Hat:openshift:4.4::el8 | grpc-cli | — |
| grpc-cli-debuginfo | affected | Red Hat:openshift:4.4::el8 | grpc-cli-debuginfo | — |
| grpc-debuginfo | affected | Red Hat:openshift:4.4::el8 | grpc-debuginfo | — |
| grpc-debugsource | affected | Red Hat:openshift:4.4::el8 | grpc-debugsource | — |
| grpc-devel | affected | Red Hat:openshift:4.4::el8 | grpc-devel | — |
| grpc-plugins | affected | Red Hat:openshift:4.4::el8 | grpc-plugins | — |
| grpc-plugins-debuginfo | affected | Red Hat:openshift:4.4::el8 | grpc-plugins-debuginfo | — |
| ignition | affected | Red Hat:openshift:4.4::el8 | ignition | — |
| ignition-debuginfo | affected | Red Hat:openshift:4.4::el8 | ignition-debuginfo | — |
| ignition-debugsource | affected | Red Hat:openshift:4.4::el8 | ignition-debugsource | — |
| ignition-validate | affected | Red Hat:openshift:4.4::el8 | ignition-validate | — |
| ignition-validate-debuginfo | affected | Red Hat:openshift:4.4::el8 | ignition-validate-debuginfo | — |
| inotify-tools | affected | Red Hat:openshift:4.4::el7 | inotify-tools | — |
| inotify-tools-debuginfo | affected | Red Hat:openshift:4.4::el7 | inotify-tools-debuginfo | — |
| inotify-tools-devel | affected | Red Hat:openshift:4.4::el7 | inotify-tools-devel | — |
| iptables | affected | Red Hat:openshift:4.4::el8 | iptables | — |
| iptables-arptables | affected | Red Hat:openshift:4.4::el8 | iptables-arptables | — |
| iptables-debuginfo | affected | Red Hat:openshift:4.4::el8 | iptables-debuginfo | — |
| iptables-debugsource | affected | Red Hat:openshift:4.4::el8 | iptables-debugsource | — |
| iptables-devel | affected | Red Hat:openshift:4.4::el8 | iptables-devel | — |
| iptables-ebtables | affected | Red Hat:openshift:4.4::el8 | iptables-ebtables | — |
| iptables-libs | affected | Red Hat:openshift:4.4::el8 | iptables-libs | — |
| iptables-libs-debuginfo | affected | Red Hat:openshift:4.4::el8 | iptables-libs-debuginfo | — |
| iptables-services | affected | Red Hat:openshift:4.4::el8 | iptables-services | — |
| iptables-utils | affected | Red Hat:openshift:4.4::el8 | iptables-utils | — |
| iptables-utils-debuginfo | affected | Red Hat:openshift:4.4::el8 | iptables-utils-debuginfo | — |
| ipxe | affected | Red Hat:openshift:4.4::el8 | ipxe | — |
| ipxe-bootimgs | affected | Red Hat:openshift:4.4::el8 | ipxe-bootimgs | — |
| ipxe-rhcert | affected | Red Hat:openshift:4.4::el8 | ipxe-rhcert | — |
| ipxe-roms | affected | Red Hat:openshift:4.4::el8 | ipxe-roms | — |
| ipxe-roms-qemu | affected | Red Hat:openshift:4.4::el8 | ipxe-roms-qemu | — |
| jenkins | affected | Red Hat:openshift:4.4::el7 | jenkins | — |
| jenkins-2-plugins | affected | Red Hat:openshift:4.4::el7 | jenkins-2-plugins | — |
| jq | affected | Red Hat:openshift:4.4::el7 | jq | — |
| jq-debuginfo | affected | Red Hat:openshift:4.4::el7 | jq-debuginfo | — |
| jq-devel | affected | Red Hat:openshift:4.4::el7 | jq-devel | — |
| kibana | affected | Red Hat:openshift:4.4::el7 | kibana | — |
| kibana-debuginfo | affected | Red Hat:openshift:4.4::el7 | kibana-debuginfo | — |
| kuryr-binding-scripts | affected | Red Hat:openshift:4.4::el8 | kuryr-binding-scripts | — |
| libnftnl | affected | Red Hat:openshift:4.4::el8 | libnftnl | — |
| libnftnl-debuginfo | affected | Red Hat:openshift:4.4::el8 | libnftnl-debuginfo | — |
| libnftnl-debugsource | affected | Red Hat:openshift:4.4::el8 | libnftnl-debugsource | — |
| libnftnl-devel | affected | Red Hat:openshift:4.4::el8 | libnftnl-devel | — |
| libthrift-java | affected | Red Hat:openshift:4.4::el7 | libthrift-java | — |
| libthrift-javadoc | affected | Red Hat:openshift:4.4::el7 | libthrift-javadoc | — |
| libunwind | affected | Red Hat:openshift:4.4::el8 | libunwind | — |
| libunwind-debuginfo | affected | Red Hat:openshift:4.4::el8 | libunwind-debuginfo | — |
| libunwind-debugsource | affected | Red Hat:openshift:4.4::el8 | libunwind-debugsource | — |
| libunwind-devel | affected | Red Hat:openshift:4.4::el8 | libunwind-devel | — |
| machine-config-daemon | affected | Red Hat:openshift:4.4::el8 | machine-config-daemon | — |
| mariadb-apb-role | affected | Red Hat:openshift:4.4::el7 | mariadb-apb-role | — |
| mysql-apb-role | affected | Red Hat:openshift:4.4::el7 | mysql-apb-role | — |
| nss-altfiles | affected | Red Hat:openshift:4.4::el8 | nss-altfiles | — |
| nss-altfiles-debuginfo | affected | Red Hat:openshift:4.4::el8 | nss-altfiles-debuginfo | — |
| nss-altfiles-debugsource | affected | Red Hat:openshift:4.4::el8 | nss-altfiles-debugsource | — |
| oniguruma | affected | Red Hat:openshift:4.4::el7 | oniguruma | — |
| oniguruma-debuginfo | affected | Red Hat:openshift:4.4::el7 | oniguruma-debuginfo | — |
| oniguruma-devel | affected | Red Hat:openshift:4.4::el7 | oniguruma-devel | — |
| openshift | affected | Red Hat:openshift:4.4::el7 | openshift | — |
| openshift | affected | Red Hat:openshift:4.4::el8 | openshift | — |
| openshift-ansible | affected | Red Hat:openshift:4.4::el7 | openshift-ansible | — |
| openshift-ansible-test | affected | Red Hat:openshift:4.4::el7 | openshift-ansible-test | — |
| openshift-clients | affected | Red Hat:openshift:4.4::el8 | openshift-clients | — |
| openshift-clients | affected | Red Hat:openshift:4.4::el7 | openshift-clients | — |
| openshift-clients-redistributable | affected | Red Hat:openshift:4.4::el7 | openshift-clients-redistributable | — |
| openshift-clients-redistributable | affected | Red Hat:openshift:4.4::el8 | openshift-clients-redistributable | — |
| openshift-eventrouter | affected | Red Hat:openshift:4.4::el7 | openshift-eventrouter | — |
| openshift-eventrouter-debuginfo | affected | Red Hat:openshift:4.4::el7 | openshift-eventrouter-debuginfo | — |
| openshift-hyperkube | affected | Red Hat:openshift:4.4::el7 | openshift-hyperkube | — |
| openshift-hyperkube | affected | Red Hat:openshift:4.4::el8 | openshift-hyperkube | — |
| openshift-kuryr | affected | Red Hat:openshift:4.4::el8 | openshift-kuryr | — |
| openshift-kuryr | affected | Red Hat:openshift:4.4::el7 | openshift-kuryr | — |
| openshift-kuryr-cni | affected | Red Hat:openshift:4.4::el8 | openshift-kuryr-cni | — |
| openshift-kuryr-cni | affected | Red Hat:openshift:4.4::el7 | openshift-kuryr-cni | — |
| openshift-kuryr-common | affected | Red Hat:openshift:4.4::el8 | openshift-kuryr-common | — |
| openshift-kuryr-common | affected | Red Hat:openshift:4.4::el7 | openshift-kuryr-common | — |
| openshift-kuryr-controller | affected | Red Hat:openshift:4.4::el8 | openshift-kuryr-controller | — |
| openshift-kuryr-controller | affected | Red Hat:openshift:4.4::el7 | openshift-kuryr-controller | — |
| openstack-ironic | affected | Red Hat:openshift:4.4::el8 | openstack-ironic | — |
| openstack-ironic-api | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-api | — |
| openstack-ironic-common | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-common | — |
| openstack-ironic-conductor | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-conductor | — |
| openstack-ironic-inspector | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-inspector | — |
| openstack-ironic-inspector-api | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-inspector-api | — |
| openstack-ironic-inspector-conductor | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-inspector-conductor | — |
| openstack-ironic-inspector-dnsmasq | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-inspector-dnsmasq | — |
| openstack-ironic-python-agent | affected | Red Hat:openshift:4.4::el8 | openstack-ironic-python-agent | — |
| ostree | affected | Red Hat:openshift:4.4::el8 | ostree | — |
| ostree-debuginfo | affected | Red Hat:openshift:4.4::el8 | ostree-debuginfo | — |
| ostree-debugsource | affected | Red Hat:openshift:4.4::el8 | ostree-debugsource | — |
| ostree-devel | affected | Red Hat:openshift:4.4::el8 | ostree-devel | — |
| ostree-grub2 | affected | Red Hat:openshift:4.4::el8 | ostree-grub2 | — |
| ostree-libs | affected | Red Hat:openshift:4.4::el8 | ostree-libs | — |
| ostree-libs-debuginfo | affected | Red Hat:openshift:4.4::el8 | ostree-libs-debuginfo | — |
| ovn2.12 | affected | Red Hat:openshift:4.4::el7 | ovn2.12 | — |
| ovn2.12-central | affected | Red Hat:openshift:4.4::el7 | ovn2.12-central | — |
| ovn2.12-debuginfo | affected | Red Hat:openshift:4.4::el7 | ovn2.12-debuginfo | — |
| ovn2.12-host | affected | Red Hat:openshift:4.4::el7 | ovn2.12-host | — |
| ovn2.12-vtep | affected | Red Hat:openshift:4.4::el7 | ovn2.12-vtep | — |
| perl-thrift | affected | Red Hat:openshift:4.4::el7 | perl-thrift | — |
| pivot | affected | Red Hat:openshift:4.4::el8 | pivot | — |
| podman | affected | Red Hat:openshift:4.4::el8 | podman | — |
| podman-debuginfo | affected | Red Hat:openshift:4.4::el8 | podman-debuginfo | — |
| podman-debugsource | affected | Red Hat:openshift:4.4::el8 | podman-debugsource | — |
| podman-docker | affected | Red Hat:openshift:4.4::el8 | podman-docker | — |
| podman-manpages | affected | Red Hat:openshift:4.4::el8 | podman-manpages | — |
| podman-remote | affected | Red Hat:openshift:4.4::el8 | podman-remote | — |
| podman-remote-debuginfo | affected | Red Hat:openshift:4.4::el8 | podman-remote-debuginfo | — |
| podman-tests | affected | Red Hat:openshift:4.4::el8 | podman-tests | — |
| postgresql-apb-role | affected | Red Hat:openshift:4.4::el7 | postgresql-apb-role | — |
| pprof | affected | Red Hat:openshift:4.4::el8 | pprof | — |
| prometheus-promu | affected | Red Hat:openshift:4.4::el7 | prometheus-promu | — |
| protobuf | affected | Red Hat:openshift:4.4::el8 | protobuf | — |
| protobuf-compiler | affected | Red Hat:openshift:4.4::el8 | protobuf-compiler | — |
| protobuf-compiler-debuginfo | affected | Red Hat:openshift:4.4::el8 | protobuf-compiler-debuginfo | — |
| protobuf-debuginfo | affected | Red Hat:openshift:4.4::el8 | protobuf-debuginfo | — |
| protobuf-debugsource | affected | Red Hat:openshift:4.4::el8 | protobuf-debugsource | — |
| protobuf-devel | affected | Red Hat:openshift:4.4::el8 | protobuf-devel | — |
| protobuf-lite | affected | Red Hat:openshift:4.4::el8 | protobuf-lite | — |
| protobuf-lite-debuginfo | affected | Red Hat:openshift:4.4::el8 | protobuf-lite-debuginfo | — |
| protobuf-lite-devel | affected | Red Hat:openshift:4.4::el8 | protobuf-lite-devel | — |
| protobuf-lite-static | affected | Red Hat:openshift:4.4::el8 | protobuf-lite-static | — |
| protobuf-static | affected | Red Hat:openshift:4.4::el8 | protobuf-static | — |
| protobuf-vim | affected | Red Hat:openshift:4.4::el8 | protobuf-vim | — |
| python2-ansible-runner | affected | Red Hat:openshift:4.4::el7 | python2-ansible-runner | — |
| python2-boto3 | affected | Red Hat:openshift:4.4::el7 | python2-boto3 | — |
| python2-botocore | affected | Red Hat:openshift:4.4::el7 | python2-botocore | — |
| python2-certifi | affected | Red Hat:openshift:4.4::el7 | python2-certifi | — |
| python2-daemon | affected | Red Hat:openshift:4.4::el7 | python2-daemon | — |
| python2-dictdiffer | affected | Red Hat:openshift:4.4::el7 | python2-dictdiffer | — |
| python2-google-auth | affected | Red Hat:openshift:4.4::el7 | python2-google-auth | — |
| python2-kubernetes | affected | Red Hat:openshift:4.4::el7 | python2-kubernetes | — |
| python2-kubernetes-tests | affected | Red Hat:openshift:4.4::el7 | python2-kubernetes-tests | — |
| python2-kuryr-kubernetes | affected | Red Hat:openshift:4.4::el7 | python2-kuryr-kubernetes | — |
| python2-lockfile | affected | Red Hat:openshift:4.4::el7 | python2-lockfile | — |
| python2-netaddr | affected | Red Hat:openshift:4.4::el8 | python2-netaddr | — |
| python2-openshift | affected | Red Hat:openshift:4.4::el7 | python2-openshift | — |
| python2-pexpect | affected | Red Hat:openshift:4.4::el7 | python2-pexpect | — |
| python2-psutil | affected | Red Hat:openshift:4.4::el7 | python2-psutil | — |
| python2-ptyprocess | affected | Red Hat:openshift:4.4::el7 | python2-ptyprocess | — |
| python2-pysocks | affected | Red Hat:openshift:4.4::el7 | python2-pysocks | — |
| python2-rsa | affected | Red Hat:openshift:4.4::el7 | python2-rsa | — |
| python2-ruamel-ordereddict | affected | Red Hat:openshift:4.4::el7 | python2-ruamel-ordereddict | — |
| python2-ruamel-yaml | affected | Red Hat:openshift:4.4::el7 | python2-ruamel-yaml | — |
| python2-s3transfer | affected | Red Hat:openshift:4.4::el7 | python2-s3transfer | — |
| python2-string_utils | affected | Red Hat:openshift:4.4::el7 | python2-string_utils | — |
| python2-typing | affected | Red Hat:openshift:4.4::el7 | python2-typing | — |
| python2-urllib3 | affected | Red Hat:openshift:4.4::el7 | python2-urllib3 | — |
| python2-voluptuous | affected | Red Hat:openshift:4.4::el7 | python2-voluptuous | — |
| python3-grpcio | affected | Red Hat:openshift:4.4::el8 | python3-grpcio | — |
| python3-grpcio-debuginfo | affected | Red Hat:openshift:4.4::el8 | python3-grpcio-debuginfo | — |
| python3-ironic-inspector-tests | affected | Red Hat:openshift:4.4::el8 | python3-ironic-inspector-tests | — |
| python3-ironic-python-agent | affected | Red Hat:openshift:4.4::el8 | python3-ironic-python-agent | — |
| python3-ironic-tests | affected | Red Hat:openshift:4.4::el8 | python3-ironic-tests | — |
| python3-kuryr-kubernetes | affected | Red Hat:openshift:4.4::el8 | python3-kuryr-kubernetes | — |
| python3-kuryr-lib | affected | Red Hat:openshift:4.4::el8 | python3-kuryr-lib | — |
| python3-kuryr-lib-tests | affected | Red Hat:openshift:4.4::el8 | python3-kuryr-lib-tests | — |
| python3-netaddr | affected | Red Hat:openshift:4.4::el8 | python3-netaddr | — |
| python3-openstacksdk | affected | Red Hat:openshift:4.4::el8 | python3-openstacksdk | — |
| python3-openstacksdk-tests | affected | Red Hat:openshift:4.4::el8 | python3-openstacksdk-tests | — |
| python3-protobuf | affected | Red Hat:openshift:4.4::el8 | python3-protobuf | — |
| python3-pyroute2 | affected | Red Hat:openshift:4.4::el8 | python3-pyroute2 | — |
| python3-sushy | affected | Red Hat:openshift:4.4::el8 | python3-sushy | — |
| python3-sushy-tests | affected | Red Hat:openshift:4.4::el8 | python3-sushy-tests | — |
| python-boto3 | affected | Red Hat:openshift:4.4::el7 | python-boto3 | — |
| python-botocore | affected | Red Hat:openshift:4.4::el7 | python-botocore | — |
| python-cachetools | affected | Red Hat:openshift:4.4::el7 | python-cachetools | — |
| python-certifi | affected | Red Hat:openshift:4.4::el7 | python-certifi | — |
| python-click | affected | Red Hat:openshift:4.4::el7 | python-click | — |
| python-daemon | affected | Red Hat:openshift:4.4::el7 | python-daemon | — |
| python-dictdiffer | affected | Red Hat:openshift:4.4::el7 | python-dictdiffer | — |
| python-elasticsearch | affected | Red Hat:openshift:4.4::el7 | python-elasticsearch | — |
| python-fb303 | affected | Red Hat:openshift:4.4::el7 | python-fb303 | — |
| python-google-auth | affected | Red Hat:openshift:4.4::el7 | python-google-auth | — |
| python-kubernetes | affected | Red Hat:openshift:4.4::el7 | python-kubernetes | — |
| python-kuryr-lib | affected | Red Hat:openshift:4.4::el8 | python-kuryr-lib | — |
| python-lockfile | affected | Red Hat:openshift:4.4::el7 | python-lockfile | — |
| python-netaddr | affected | Red Hat:openshift:4.4::el8 | python-netaddr | — |
| python-openshift | affected | Red Hat:openshift:4.4::el7 | python-openshift | — |
| python-openstacksdk | affected | Red Hat:openshift:4.4::el8 | python-openstacksdk | — |
| python-pexpect | affected | Red Hat:openshift:4.4::el7 | python-pexpect | — |
| python-psutil | affected | Red Hat:openshift:4.4::el7 | python-psutil | — |
| python-psutil-debuginfo | affected | Red Hat:openshift:4.4::el7 | python-psutil-debuginfo | — |
| python-ptyprocess | affected | Red Hat:openshift:4.4::el7 | python-ptyprocess | — |
| python-pyroute2 | affected | Red Hat:openshift:4.4::el8 | python-pyroute2 | — |
| python-pysocks | affected | Red Hat:openshift:4.4::el7 | python-pysocks | — |
| python-requests-unixsocket | affected | Red Hat:openshift:4.4::el7 | python-requests-unixsocket | — |
| python-rsa | affected | Red Hat:openshift:4.4::el7 | python-rsa | — |
| python-ruamel-ordereddict | affected | Red Hat:openshift:4.4::el7 | python-ruamel-ordereddict | — |
| python-ruamel-ordereddict-debuginfo | affected | Red Hat:openshift:4.4::el7 | python-ruamel-ordereddict-debuginfo | — |
| python-ruamel-yaml | affected | Red Hat:openshift:4.4::el7 | python-ruamel-yaml | — |
| python-ruamel-yaml-debuginfo | affected | Red Hat:openshift:4.4::el7 | python-ruamel-yaml-debuginfo | — |
| python-s3transfer | affected | Red Hat:openshift:4.4::el7 | python-s3transfer | — |
| python-string_utils | affected | Red Hat:openshift:4.4::el7 | python-string_utils | — |
| python-sushy | affected | Red Hat:openshift:4.4::el8 | python-sushy | — |
| python-thrift | affected | Red Hat:openshift:4.4::el7 | python-thrift | — |
| python-typing | affected | Red Hat:openshift:4.4::el7 | python-typing | — |
| python-urllib3 | affected | Red Hat:openshift:4.4::el7 | python-urllib3 | — |
| python-voluptuous | affected | Red Hat:openshift:4.4::el7 | python-voluptuous | — |
| redhat-release-coreos | affected | Red Hat:openshift:4.4::el8 | redhat-release-coreos | — |
| rhcos-tools | affected | Red Hat:openshift:4.4::el8 | rhcos-tools | — |
| rhosp-director-images-ipa-x86_64 | affected | Red Hat:openshift:4.4::el8 | rhosp-director-images-ipa-x86_64 | — |
| rhosp-director-images-ppc64le | affected | Red Hat:openshift:4.4::el8 | rhosp-director-images-ppc64le | — |
| rpm-ostree | affected | Red Hat:openshift:4.4::el8 | rpm-ostree | — |
| rpm-ostree-debuginfo | affected | Red Hat:openshift:4.4::el8 | rpm-ostree-debuginfo | — |
| rpm-ostree-debugsource | affected | Red Hat:openshift:4.4::el8 | rpm-ostree-debugsource | — |
| rpm-ostree-devel | affected | Red Hat:openshift:4.4::el8 | rpm-ostree-devel | — |
| rpm-ostree-libs | affected | Red Hat:openshift:4.4::el8 | rpm-ostree-libs | — |
| rpm-ostree-libs-debuginfo | affected | Red Hat:openshift:4.4::el8 | rpm-ostree-libs-debuginfo | — |
| runc | affected | Red Hat:openshift:4.4::el8 | runc | — |
| runc | affected | Red Hat:openshift:4.4::el7 | runc | — |
| runc-debuginfo | affected | Red Hat:openshift:4.4::el7 | runc-debuginfo | — |
| runc-debuginfo | affected | Red Hat:openshift:4.4::el8 | runc-debuginfo | — |
| runc-debugsource | affected | Red Hat:openshift:4.4::el8 | runc-debugsource | — |
| rust-afterburn | affected | Red Hat:openshift:4.4::el8 | rust-afterburn | — |
| rust-afterburn-debugsource | affected | Red Hat:openshift:4.4::el8 | rust-afterburn-debugsource | — |
| skopeo | affected | Red Hat:openshift:4.4::el8 | skopeo | — |
| skopeo | affected | Red Hat:openshift:4.4::el7 | skopeo | — |
| skopeo-debuginfo | affected | Red Hat:openshift:4.4::el7 | skopeo-debuginfo | — |
| skopeo-debuginfo | affected | Red Hat:openshift:4.4::el8 | skopeo-debuginfo | — |
| skopeo-debugsource | affected | Red Hat:openshift:4.4::el8 | skopeo-debugsource | — |
| skopeo-tests | affected | Red Hat:openshift:4.4::el7 | skopeo-tests | — |
| systemd | affected | Red Hat:openshift:4.4::el8 | systemd | — |
| systemd-container | affected | Red Hat:openshift:4.4::el8 | systemd-container | — |
| systemd-container-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-container-debuginfo | — |
| systemd-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-debuginfo | — |
| systemd-debugsource | affected | Red Hat:openshift:4.4::el8 | systemd-debugsource | — |
| systemd-devel | affected | Red Hat:openshift:4.4::el8 | systemd-devel | — |
| systemd-journal-remote | affected | Red Hat:openshift:4.4::el8 | systemd-journal-remote | — |
| systemd-journal-remote-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-journal-remote-debuginfo | — |
| systemd-libs | affected | Red Hat:openshift:4.4::el8 | systemd-libs | — |
| systemd-libs-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-libs-debuginfo | — |
| systemd-pam | affected | Red Hat:openshift:4.4::el8 | systemd-pam | — |
| systemd-pam-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-pam-debuginfo | — |
| systemd-tests | affected | Red Hat:openshift:4.4::el8 | systemd-tests | — |
| systemd-tests-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-tests-debuginfo | — |
| systemd-udev | affected | Red Hat:openshift:4.4::el8 | systemd-udev | — |
| systemd-udev-debuginfo | affected | Red Hat:openshift:4.4::el8 | systemd-udev-debuginfo | — |
| thrift | affected | Red Hat:openshift:4.4::el7 | thrift | — |
| thrift-debuginfo | affected | Red Hat:openshift:4.4::el7 | thrift-debuginfo | — |
| thrift-devel | affected | Red Hat:openshift:4.4::el7 | thrift-devel | — |
| thrift-glib | affected | Red Hat:openshift:4.4::el7 | thrift-glib | — |
| thrift-qt | affected | Red Hat:openshift:4.4::el7 | thrift-qt | — |
| tini | affected | Red Hat:openshift:4.4::el7 | tini | — |
| tini-debuginfo | affected | Red Hat:openshift:4.4::el7 | tini-debuginfo | — |
| toolbox | affected | Red Hat:openshift:4.4::el8 | toolbox | — |
MINI-2jj3-9fx2-c62p
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-87464
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the download_file_to_uploads function. This is due...
CVEs:CVE-2026-93031
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Use-your-Drive | Google Drive plugin for WordPress | affected | WP Cloud Plugins | — | — |
MINI-2424-fjg7-ww67
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-87438
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3qfv-7jrv-v7g9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87430
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87448
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87474
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87512
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-87488
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-87527
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-27vm-6cp6-xpff
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87529
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVEs:CVE-2026-21096
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung Mobile | — | — |
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVEs:CVE-2026-21095
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung Mobile | — | — |
MINI-2g5v-gwhw-m3wp
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87440
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87444
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-4fhx-cmh5-72g9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-37hw-rwxg-33c6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:...
CVEs:CVE-2026-87547
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87579
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87455
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87581
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML...
CVEs:CVE-2026-87487
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-33cf-8hwx-c4g6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-33r3-985h-r4hg
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| istio-cni-fips-1.26 | affected | MinimOS | istio-cni-fips-1.26 | — |
| istioctl-fips-1.26 | affected | MinimOS | istioctl-fips-1.26 | — |
| istio-install-cni-fips-1.26 | affected | MinimOS | istio-install-cni-fips-1.26 | — |
| istio-pilot-agent-fips-1.26 | affected | MinimOS | istio-pilot-agent-fips-1.26 | — |
| istio-pilot-discovery-fips-1.26 | affected | MinimOS | istio-pilot-discovery-fips-1.26 | — |
MINI-2qmw-4xvp-c9gw
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| istio-cni-1.25 | affected | MinimOS | istio-cni-1.25 | — |
| istioctl-1.25 | affected | MinimOS | istioctl-1.25 | — |
| istio-install-cni-1.25 | affected | MinimOS | istio-install-cni-1.25 | — |
| istio-pilot-agent-1.25 | affected | MinimOS | istio-pilot-agent-1.25 | — |
| istio-pilot-discovery-1.25 | affected | MinimOS | istio-pilot-discovery-1.25 | — |
MINI-2vwh-rx7m-mfx6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| istio-cni-1.22 | affected | MinimOS | istio-cni-1.22 | — |
| istioctl-1.22 | affected | MinimOS | istioctl-1.22 | — |
| istio-install-cni-1.22 | affected | MinimOS | istio-install-cni-1.22 | — |
| istio-pilot-agent-1.22 | affected | MinimOS | istio-pilot-agent-1.22 | — |
| istio-pilot-discovery-1.22 | affected | MinimOS | istio-pilot-discovery-1.22 | — |
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91709
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87634
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87470
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87643
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87520
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87609
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87504
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a c...
CVEs:CVE-2026-87616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-39gj-qjpf-vr3v
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-47w3-9462-2f6m
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messag...
CVEs:CVE-2026-56855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| crypto | affected | golang | — | — |
MINI-2358-r23m-r9hj
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-2hwm-c6mm-xr59
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severi...
CVEs:CVE-2026-87510
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security ...
CVEs:CVE-2026-87553
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87639
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)
CVEs:CVE-2026-87526
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55366
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87654
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87431
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87646
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: M...
CVEs:CVE-2026-87582
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec...
CVEs:CVE-2026-87481
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87613
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87478
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87528
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a cr...
CVEs:CVE-2026-87479
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87480
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severi...
CVEs:CVE-2026-87524
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87471
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3gv2-w59c-mv6c
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87494
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87500
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87443
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87436
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87446
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-2chc-rpqc-4vw9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-85047
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85042
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85050
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: High)
CVEs:CVE-2026-85043
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-4h74-jwm9-vjwg
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kube-apiserver-1.37 | affected | MinimOS | kube-apiserver-1.37 | — |
| kube-controller-manager-1.37 | affected | MinimOS | kube-controller-manager-1.37 | — |
| kubelet-1.37 | affected | MinimOS | kubelet-1.37 | — |
| kube-proxy-1.37 | affected | MinimOS | kube-proxy-1.37 | — |
| kube-scheduler-1.37 | affected | MinimOS | kube-scheduler-1.37 | — |
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87621
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...
CVEs:CVE-2026-87618
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87549
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85051
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87612
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87638
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87637
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87650
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
CVEs:CVE-2026-21092
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel...
CVEs:CVE-2026-78662
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| crypto | affected | golang | — | — |
| golang.org/x/crypto/ssh | affected | golang.org/x/crypto | — | — |
MINI-3w83-893w-pqx5
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-3rmp-75gw-jff6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-462v-9mwr-jww9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87595
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87435
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87439
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3ggf-hfhv-rr5w
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91711
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91710
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87555
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87636
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87572
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87450
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87429
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-4mrj-qc9m-2958
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87590
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87588
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87536
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87587
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87460
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87542
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-2rcx-x3cw-8fm4
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-44jp-39jh-2x59
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-48rr-qx9q-c47h
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
MINI-4p33-m7jg-wm58
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security sev...
CVEs:CVE-2026-87537
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-4gxw-vx62-cxf9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87565
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87522
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87433
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87506
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87604
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User ...
CVEs:CVE-2026-28666
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85053
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87437
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87477
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-2jw2-g998-8xm3
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User inte...
CVEs:CVE-2026-28606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| android | affected | — | — | |
| Android | affected | — | — |
MINI-497j-gjmp-q66w
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sdk-core | affected | MinimOS | google-cloud-sdk-core | — |
Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87513
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2026-56920
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56882
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87556
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-0200
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
CVEs:CVE-2026-87585
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and o...
CVEs:CVE-2026-14989
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode (WordPress plugin gdpr-cookie-consent) | affected | wplegalpages | — | — |
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)
CVEs:CVE-2026-87447
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58710
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58683
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-56997
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVEs:CVE-2026-56974
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87548
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28609
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sever...
CVEs:CVE-2026-87648
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-2v89-w5ff-r5q7
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87600
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56942
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55331
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-0170
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
MINI-277g-26v9-89h6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping...
CVEs:CVE-2026-19778
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping | affected | aukejomm | — | — |
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87442
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87434
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55306
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87625
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-34gm-3qp3-rwmp
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a c...
CVEs:CVE-2026-87644
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87564
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-4hww-g47f-4hgw
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87441
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87472
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87445
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87473
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-57008
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87535
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity...
CVEs:CVE-2026-87518
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87466
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87453
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3ghc-c3m8-8hxg
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87503
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87519
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87642
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interact...
CVEs:CVE-2026-45527
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87483
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87541
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87545
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87459
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87454
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87508
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87626
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87569
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87574
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87591
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87550
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the control_selectors meta field with show_i...
CVEs:CVE-2026-4657
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Easy Google Fonts | affected | sunny_johal | — | — |
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87458
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87499
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87620
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87623
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87432
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87475
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87456
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87515
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87516
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-2mw3-rwhq-xxj2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
CVEs:CVE-2026-87489
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87632
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87507
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-24x2-qpgw-pr73
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-85044
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security severit...
CVEs:CVE-2026-87570
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
GCP-2026-059 (High)
UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87635
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87496
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87485
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87557
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87610
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87451
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87523
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87484
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87539
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87534
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87584
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security s...
CVEs:CVE-2026-87580
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVEs:CVE-2026-55343
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87594
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87598
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87532
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2026-28627
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
CVEs:CVE-2026-87511
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87452
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87521
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)
CVEs:CVE-2026-87597
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87573
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87449
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87593
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87608
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87490
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)
CVEs:CVE-2026-87505
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28604
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)
CVEs:CVE-2026-87561
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87640
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87544
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)
CVEs:CVE-2026-87546
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87497
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87538
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87622
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87559
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87468
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87493
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87589
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87592
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87495
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)
CVEs:CVE-2026-87627
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87560
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87462
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87577
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87576
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87619
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87614
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87498
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87543
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87586
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87596
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87653
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87562
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87647
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87501
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87599
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87651
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87601
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87655
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-85052
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
CVEs:CVE-2026-87658
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87469
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87531
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-364r-896p-9p4m
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
CVEs:CVE-2026-21103
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87540
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-87482
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium...
CVEs:CVE-2026-87605
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-87517
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87657
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87611
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87656
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87602
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87502
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87465
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVEs:CVE-2026-87628
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87649
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87583
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
CVEs:CVE-2026-21094
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87563
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91708
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)
CVEs:CVE-2026-87633
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87463
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
CVEs:CVE-2026-87461
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87568
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)
CVEs:CVE-2026-87567
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVEs:CVE-2026-84127
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Firefox for Android | affected | Mozilla | — | — |
| firefox_mobile | affected | mozilla | — | — |
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87551
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87615
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-87624
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-87641
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVEs:CVE-2026-87530
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28659
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android_xr | affected | — | — |
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVEs:CVE-2026-87578
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
CVEs:CVE-2026-21097
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)
CVEs:CVE-2026-87486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-87514
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User in...
CVEs:CVE-2026-49883
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android Wear | affected | — | — |
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56967
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
CVEs:CVE-2026-21102
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung Mobile | — | — |
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
CVEs:CVE-2026-21101
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
CVEs:CVE-2026-21087
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung Mobile | — | — |
Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)
CVEs:CVE-2026-87552
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVEs:CVE-2026-21088
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
MINI-2ffg-q5pj-p6j3
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
CVEs:CVE-2026-87571
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVEs:CVE-2026-87533
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVEs:CVE-2026-21085
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung | — | — |
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVEs:CVE-2026-21089
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVEs:CVE-2026-21091
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVEs:CVE-2026-21090
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)
CVEs:CVE-2026-87509
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56975
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-87525
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-57012
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2026-58767
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVEs:CVE-2026-21104
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
| Samsung Mobile Devices | affected | Samsung Mobile | — | — |
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2026-49919
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVEs:CVE-2026-21093
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
CVEs:CVE-2026-21100
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
CVEs:CVE-2026-21099
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-87554
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. Use...
CVEs:CVE-2026-49895
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56881
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...
CVEs:CVE-2026-58679
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28664
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...
CVEs:CVE-2026-28650
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ...
CVEs:CVE-2026-28599
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56941
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-45531
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58726
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56979
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVEs:CVE-2026-87457
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-87467
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...
CVEs:CVE-2026-58755
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58751
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58691
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56982
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56973
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56970
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55304
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...
CVEs:CVE-2026-28612
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...
CVEs:CVE-2026-28593
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58765
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58747
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-58699
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58678
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-57006
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56978
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed ...
CVEs:CVE-2026-28642
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. Use...
CVEs:CVE-2026-28634
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58698
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-57042
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56992
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56922
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...
CVEs:CVE-2026-49887
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-58718
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-57035
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56989
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56972
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56907
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55365
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55317
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56986
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56985
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-55323
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58721
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo...
CVEs:CVE-2026-58695
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVEs:CVE-2026-57014
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56950
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-55351
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl...
CVEs:CVE-2026-0199
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-0177
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex...
CVEs:CVE-2026-58766
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2026-58739
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56879
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2026-28638
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is neede...
CVEs:CVE-2026-28613
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-0183
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for expl...
CVEs:CVE-2026-28656
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne...
CVEs:CVE-2026-28644
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti...
CVEs:CVE-2026-28636
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2026-28631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28614
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2026-28607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploi...
CVEs:CVE-2026-58731
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2026-56958
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56892
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User ...
CVEs:CVE-2026-28602
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58773
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
CVEs:CVE-2026-28622
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58744
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is ...
CVEs:CVE-2026-28633
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not neede...
CVEs:CVE-2026-28596
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56945
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...
CVEs:CVE-2026-28624
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User i...
CVEs:CVE-2026-28603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...
CVEs:CVE-2026-28600
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28572
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...
CVEs:CVE-2026-28626
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2026-28630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User int...
CVEs:CVE-2026-28623
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28671
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58734
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58728
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58724
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-58701
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56988
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56923
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-56915
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91741
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91731
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
MINI-3h2j-229p-mmw6
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91728
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-93372
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-93377
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-91721
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-93382
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-93374
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28618
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
CVEs:CVE-2026-93381
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91738
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91729
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91737
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91745
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91736
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91724
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-91749
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91718
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91715
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84347
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91733
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-84352
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-84353
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-93385
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-3fv6-48cc-q346
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: ...
CVEs:CVE-2026-91735
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91722
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
CVEs:CVE-2026-93373
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84326
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-49882
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVEs:CVE-2026-84324
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-49879
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84333
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91720
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84351
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84354
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2026-91726
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security seve...
CVEs:CVE-2026-91712
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-93383
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-93387
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-2cv6-mqj5-2vxr
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91743
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-93386
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. (Chromium security severity: High)
CVEs:CVE-2026-84325
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91740
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91747
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-3857-f297-9594
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84349
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
CVEs:CVE-2026-93384
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security sev...
CVEs:CVE-2026-91732
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91725
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91714
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-91719
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromi...
CVEs:CVE-2026-91744
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-91746
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interact...
CVEs:CVE-2026-91748
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML...
CVEs:CVE-2026-84335
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security sever...
CVEs:CVE-2026-91730
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Low)
CVEs:CVE-2026-84350
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
MINI-3vqr-whwf-5rw5
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | MinimOS | chromium | — |
| chromium-docker-selenium-compat | affected | MinimOS | chromium-docker-selenium-compat | — |
| chromium-lang | affected | MinimOS | chromium-lang | — |
Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84348
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91739
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91713
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-84327
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (CAPEC-122). Authentication credentials persist after a cross-namespace association has been denied by RBAC enforcement, allowing a lo...
CVEs:CVE-2026-78600
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| elastic_cloud_on_kubernetes | affected | elastic | — | — |
Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84332
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: High)
CVEs:CVE-2026-84357
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-84329
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security ...
CVEs:CVE-2026-84323
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-91723
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84330
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-84331
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2026-84356
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84355
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84328
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2026-84359
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2026-84358
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is ...
CVEs:CVE-2026-28662
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID:...
CVEs:CVE-2026-20506
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | MediaTek | — | — |
| MediaTek chipset | affected | MediaTek, Inc. | — | — |
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security sever...
CVEs:CVE-2026-91727
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-91734
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User inter...
CVEs:CVE-2026-45515
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)
CVEs:CVE-2026-91717
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (CAPEC-690). An actor holding limited Kubernetes permissions confined to a single namespace could cause attacker-...
CVEs:CVE-2026-78609
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| elastic_cloud_on_kubernetes | affected | elastic | — | — |
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2026-28639
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2026-45520
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVEs:CVE-2026-93375
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Chrome | affected | — | — |
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVEs:CVE-2026-84334
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| Chrome | affected | — | — |
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28658
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ...
CVEs:CVE-2026-28655
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2026-49884
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28594
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
CVEs:CVE-2026-28583
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interact...
CVEs:CVE-2026-28663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28660
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28653
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVEs:CVE-2026-28657
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
CVEs:CVE-2026-45528
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| Android | affected | — | — |
In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2026-28620
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interactio...
CVEs:CVE-2026-28584
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti...
CVEs:CVE-2026-28611
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privi...
CVEs:CVE-2026-28582
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| Android | affected | — | — |
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2026-28590
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
GCP-2026-062 (High)
GCP-2026-061 (Medium)
GCP-2026-060 (High)
GCP-2026-058 (Critical)
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.