Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...
CVE-2026-11635
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromise
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...
CVE-2026-11652
Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the
Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...
CVE-2026-11639
Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbit
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who...
CVE-2026-11656
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to ins
Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who...
CVE-2026-11642
Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the re
Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...
CVE-2026-11657
Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrar
Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker...
CVE-2026-11637
Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary c
Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote...
CVE-2026-11646
Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrar
Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...
CVE-2026-11643
Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via
Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who...
CVE-2026-11644
Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to in
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...
CVE-2026-11650
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...
CVE-2026-11649
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside
bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught...
CVE-2026-9669
bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...
CVE-2026-11633
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitra
Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who...
CVE-2026-11632
Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to en
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
CVE-2026-47737
### Impact Puma is vulnerable to source IP spoofing when `set_remote_address proxy_protocol: :v1` is enabled and persis
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
CVE-2026-47736
### Impact [PROXY protocol support for Puma](https://github.com/puma/puma/issues/2651) was added in version 5.5.0. Whe
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks
CVE-2026-47735
### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc
nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
CVE-2026-47726
`internal/api/audit.go:12` — `handleGetAuditLog` does no admin check. The route is bearer-auth gated only; any operator
nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints
CVE-2026-47725
Every `/ui/*` POST / PUT / PATCH / DELETE route processes the request as soon as the session cookie validates. `SameSite