CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
This vulnerability in e-Sushrut is due to improper authentication logic that relies on client-side response parameters to determine authentication status.
Brak autoryzacji w Brainstorm Force SureForms Pro umożliwia wykorzystanie nieprawidłowo skonfigurowanych poziomów kontroli dostępu. Problem ten dotyczy wersji SureForms Pro od n/a do 2.8.0.
Dell iDRAC10 versions 1.20.70.50 and 1.30.05.10 contain an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low-privileged attacker to gain elevated access.
GCHQ CyberChef before version 11.0.0 contains an XSS vulnerability via the Show Base64 offsets function, allowing script injection.
Starman for Perl before version 0.4018 is vulnerable to HTTP Request Smuggling due to improper header precedence. Starman incorrectly prioritizes Content-Length over Transfer-Encoding: chunked, violating RFC 7230. An attacker can exploit this to smuggle malicious HTTP requests through a front-end reverse proxy.
Use after free in Canvas in Google Chrome on Linux and ChromeOS prior to version 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
A use-after-free vulnerability in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Severity: Critical)
A use-after-free vulnerability in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Severity: High)
A use-after-free vulnerability in the Animation component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Google Chrome prior to version 147.0.7727.138 has a use-after-free vulnerability in the GPU component. A remote attacker who compromised the renderer process can potentially exploit heap corruption via a crafted HTML page.
Use after free in Navigation in Google Chrome prior to version 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
A use-after-free vulnerability in the Media component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
An out-of-bounds read and write vulnerability in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Severity: High)
Google Chrome prior to version 147.0.7727.138 has a heap buffer overflow vulnerability in the Skia library. A remote attacker who has compromised the renderer process can potentially escape the browser sandbox via a crafted HTML page.
Google Chrome on Android prior to version 147.0.7727.138 has a use-after-free vulnerability in the Media component. A remote attacker who compromised the renderer process can potentially perform a sandbox escape via a crafted HTML page.
Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.
Use-after-free in the Cast component in Google Chrome prior to 147.0.7727.138. An attacker on the local network can execute arbitrary code inside a sandbox via malicious network traffic. High severity.
A use-after-free vulnerability in the Codecs component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Use-after-free vulnerability in Chromoting in Google Chrome prior to version 147.0.7727.138 allows a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High).
Google Chrome prior to version 147.0.7727.138 has an inappropriate implementation vulnerability in the Tint component. A remote attacker can perform out-of-bounds memory access via a crafted HTML page.