CVE ID :CVE-2026-85053 Published : Sept. 3, 2026, 8:17 p.m. | 44 minutes ago Description :Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE ID :CVE-2026-85051 Published : Sept. 3, 2026, 8:17 p.m. | 44 minutes ago Description :Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
CVE ID :CVE-2026-85048 Published : Sept. 3, 2026, 8:17 p.m. | 44 minutes ago Description :Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside…
CVE ID :CVE-2026-85049 Published : Sept. 3, 2026, 8:17 p.m. | 44 minutes ago Description :Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE ID :CVE-2026-85396 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can…
CVE ID :CVE-2026-85394 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the…
CVE ID :CVE-2026-85393 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm…
CVE ID :CVE-2026-85391 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the…
CVE ID :CVE-2026-85388 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY…
CVE ID :CVE-2026-84381 Published : Sept. 2, 2026, 7:18 p.m. | 43 minutes ago Description :HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src and src when the remote origin uses…