آخرین آسیب‌پذیری‌ها

Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

WebSub: Reflected script execution through intent-verification challenges

Nuxt Ollama: public runtime configuration discloses the configured cloud API key

GRR vulnerable to Arbitrary File Read and Deletion

GRR vulnerable to Remote Code Execution Via PHP Code Injection

Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401

GRR has a Reflected XSS issue

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API

a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers

Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field

Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability