CVE Vulnerability Catalog

Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Critical severity.

A use-after-free vulnerability in Views in Google Chrome on Windows prior to 147.0.7727.138 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

In Google Chrome on Android prior to version 147.0.7727.138, a use-after-free vulnerability in WebView allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

In Google Chrome prior to version 147.0.7727.138, a use-after-free vulnerability in WebRTC allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A heap buffer overflow vulnerability in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Severity: Medium)

Use-after-free vulnerability in the Cast component of Google Chrome prior to 147.0.7727.138. An attacker on the local network segment could potentially exploit heap corruption via malicious network traffic.

Google Chrome prior to version 147.0.7727.138 has a Type Confusion vulnerability in V8, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A use-after-free vulnerability in WebRTC in Google Chrome prior to version 147.0.7727.138 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Use-after-free vulnerability in the media component of Google Chrome prior to version 147.0.7727.138. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside a sandbox.

In Google Chrome on Mac prior to version 147.0.7727.138, a use-after-free vulnerability in the Views component can be exploited by a remote attacker via a crafted HTML page to potentially cause heap corruption. (High severity)

A vulnerability in the mod_sql module of ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, when USER requests are logged with expansions like %U and the SQL backend allows commands (e.g., COPY TO PROGRAM).

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Tool. This manipulation of the argument context causes path traversal.

A command injection vulnerability has been found in eiliyaabedini aider-mcp up to commit 667b914301aada695aab0e46d1fb3a7d5e32c8af. The code_with_ai function in aider_mcp.py improperly validates the working_dir and editable_files arguments, allowing remote command execution.

In eiceblue spire-pdf-mcp-server 0.1.1, a path traversal vulnerability exists in the get_pdf_path function of src/spire_pdf_mcp/server.py. Manipulating the filepath argument allows remote attack.

In eiceblue spire-doc-mcp-server 1.0.0, a path traversal vulnerability was found in the get_doc_path function of src/spire_doc_mcp/api/base.py. Manipulating the document_name argument allows remote attack.

Outline versions 0.86.0 through 1.7.0 contain an insecure direct object reference (IDOR) vulnerability in the `shares.create` API endpoint. When both `collectionId` and `documentId` are provided in the request, the authorization logic only checks access to the collection, ignoring the document. This allows an authenticated attacker to generate a valid public share link for any document on the platform, including documents from other workspaces.

OpenClaw before version 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.admin scope requirement.

OpenClaw przed wersją 2026.4.8 zawiera lukę w zabezpieczeniach, która pozwala na obejście mechanizmu ochrony przed modyfikacją trwałych profili przeglądarki. Atakujący mogą wykorzystać tę lukę do zmiany konfiguracji przeglądarki.

OpenClaw before version 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.read requests to operator.write permissions. Attackers can exploit this by sending read-scoped requests through the gateway auth route to gain unauthorized write access to runtime operations.