CVE Vulnerability Catalog

A vulnerability in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue is related to a race condition in the ANGLE component.

A vulnerability in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue is related to type confusion in the ANGLE component.

A race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The severity is Medium.

A use-after-free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The severity is High.

Incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows prior to 152.0.7977.65. A local attacker could bypass system access restrictions via a local program. (Chromium security severity: Medium)

Buffer overflow vulnerability in the WebRTC component of Google Chrome prior to 152.0.7977.65. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Mesop prior to version 1.3.3, when running in debug mode, exposes a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter. An unauthenticated attacker can send requests with high counter values, exhausting the worker pool and making the server unavailable. The attack requires minimal effort and leaves the server unresponsive until manually restarted.

Incorrect Access Control vulnerability in the /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters to paginate and retrieve sensitive information of all registered users.

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service.

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component that allows an attacker to perform OS command injection. Successful exploitation could lead to code execution, data tampering, information disclosure, and denial of service.

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands that allows an attacker to perform OS command injection. Successful exploitation could lead to code execution, data tampering, information disclosure, and denial of service.

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process that allows an attacker to cause improper certificate validation. Successful exploitation could lead to information disclosure, data tampering, code execution, and escalation of privileges.

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command that allows a local attacker to perform code injection. Successful exploitation could lead to code execution, data tampering, information disclosure, and denial of service.

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process that allows an attacker to cause execution of untrusted code. Successful exploitation could lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.