Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toEPSS 0.2%Oct 13, 2026
- High8.3Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandboxEPSS 0.3%Oct 13, 2026
- High8.8Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Medium5.5Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program.EPSS 0.1%Oct 13, 2026
- Medium4.3Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted fEPSS 0.2%Oct 13, 2026
- Critical9.6Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Unknownlibexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.Oct 7, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 5, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.EPSS 0.3%Sep 29, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit iEPSS 0.2%Sep 25, 2026
- UnknownExpat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted.Sep 19, 2026
- High7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.Aug 20, 2026
- High7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, cAug 20, 2026
- UnknownExpat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atAug 18, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.EPSS 0.3%Aug 14, 2026
- Medium6.1A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- Medium6.6A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- High7.6A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio.EPSS 0.4%Aug 10, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionJul 17, 2026
- High7.5A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin.Jul 9, 2026
- High7.1A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin.Jul 9, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.EPSS 0.2%Jul 7, 2026