Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote...
CVE-2026-15772
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised
#severity:high
共收录 5441 条相关情报。
← 返回所有主题NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model...
CVE-2026-24233
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization
NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap...
CVE-2026-24272
NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful
Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker...
CVE-2026-15777
Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an...
CVE-2026-47472
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-
Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had...
CVE-2026-15774
Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the render
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...
CVE-2026-15769
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 al
Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a...
CVE-2026-15767
Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation...
CVE-2026-24238
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A succ
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer...
CVE-2026-24268
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploi
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote...
CVE-2026-15776
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitra
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where...
CVE-2026-47473
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful ex
NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode
CVE-2026-54446
## Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode ### Summary When `netlicensing-mcp` is run in
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend
CVE-2026-61549
### Impact A privilege escalation vulnerability affects Woodpecker instances using the **Kubernetes backend**. The pip
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
### Summary Non-admin operators (role `user`) can set `allow_private: true` on their own managed webhook subscription (
nebula-mesh: Certificate revocation is never enforced at the mesh
CVE-2026-61699
### Summary nebula-mesh revokes a host by adding its certificate fingerprint to a per-CA blocklist and shipping that li
Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode
CVE-2026-54629
## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table m
nebula-mesh: Operator session tokens stored in plaintext in the database
CVE-2026-53603
## Impact Operator session tokens are stored in plaintext in the `operator_sessions` table (the `token` column is the P
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
CVE-2026-44891
### Summary The StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, allo
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
CVE-2026-53604
## Impact The web handler `renderMobileBundle` (`internal/web/handlers.go:1325`) passes the real `*pki.CAResolver` dire