Base de CVEs

CVE-2026-11266 Média · 4.3 CWE-693 04/06/2026

Inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass Safe Browsing via a malicious file. (Chromium security severity: Low)

CVE-2026-11264 Média · 4.3 CWE-693 04/06/2026

Policy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed…

Policy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11263 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in WebAuthentication in Google Chrome on Android prior…

Insufficient policy enforcement in WebAuthentication in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11260 Média · 4.3 CWE-693 04/06/2026

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11248 Alta · 8.8 CWE-693 04/06/2026

Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11247 Baixa · 3.1 CWE-693 04/06/2026

Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to…

Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11234 Média · 4.3 CWE-693 04/06/2026

Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11219 Média · 4.3 CWE-693 04/06/2026

Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11206 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53…

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11174 Média · 5.3 CWE-693 04/06/2026

Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11170 Alta · 8.1 CWE-693 04/06/2026

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to…

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-10950 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to…

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10944 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to…

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2025-52609 Média · 5.3 CWE-693 04/06/2026

HCL iControl was affected by Missing Security Headers vulnerability.

HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers.

CVE-2026-0097 Alta · 8.0 CWE-693 01/06/2026

In multiple locations, there is a possible way to bypass user interaction when pairing…

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0087 Alta · 7.8 CWE-693 01/06/2026

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible…

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0077 Alta · 7.8 CWE-693 01/06/2026

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background…

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0045 Alta · 7.8 CWE-693 01/06/2026

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a…

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48652 Alta · 7.8 CWE-693 01/06/2026

In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass…

In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48649 Alta · 7.8 CWE-693 01/06/2026

In multiple locations, there is a possible way to reset user-selected permissions…

In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-10174 Média · 6.3 CWE-693 31/05/2026

Aider-AI Aider Pre-commit Hook args.py protection mechanism

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-49325 Média · 4.6 CWE-693 29/05/2026

Indian Scout Bobber 2025 WCM voltage-based shutdown

Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module (WCM) wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via a falling-edge voltage transition on a dedicated wire pair. The receiving ECU does not distinguish between an active shutdown pulse and an open-circuit / disconnected condition; interrupting the relevant wires leaves the motorcycle fully operable even though the WCM never validated the rider's PIN. Specific connector details have been withheld pending vendor remediation.

CVE-2026-45102 Crítica · 9.9 CWE-693 27/05/2026

OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion

OneUptime is an open-source monitoring and observability platform. Prior to 10.0.98, OneUptime uses the Node.js' vm module as an isolation primitive. This API was not designed for that and can be escaped via error objects and infinite recursion. This vulnerability is fixed in 10.0.98.

CVE-2026-44451 Crítica · 9.3 CWE-693 26/05/2026

Lumiverse: escape de sandbox em overrides de componentes TSX via referência DOM e bypass do validador

O Lumiverse é um aplicativo de chat com IA com recursos completos. Antes da versão 0.9.7, o sistema de substituição de componentes transpila TSX fornecido pelo usuário via Sucrase e o avalia com new Function, sombreando globais perigosos (fetch, window, eval, etc.) com undefined. Um validador estático de código-fonte (validateComponentOverrideSource) bloqueia adicionalmente esses identificadores por meio de expressão regular com limites de palavra. Ambos os controles são contornados. Bypass por concatenação de strings no validador estático: qualquer identificador bloqueado pode ser reconstruído em tempo de execução a partir de fragmentos de string ('ownerDoc' + 'ument'). Escape via referência DOM do sandbox: useRef e useEffect são disponibilizados no escopo. Uma ref anexada a um elemento renderizado fornece um nó DOM ativo. A partir de qualquer nó DOM real, node['ownerDoc'+'ument']['def'+'aultView'] retorna o window real, contornando todos os sombreamentos de identificadores. Pacotes de temas (.lumitheme / .lumiverse-theme) são o mecanismo de distribuição compartilhável. Um pacote malicioso é um caminho de exploração: a vítima importa o arquivo, habilita um override de componente no Theme Editor, e a carga é disparada na sessão autenticada dela.Esta vulnerabilidade está corrigida na versão 0.9.7.

CVE-2026-44071 Baixa · 3.7 CWE-693 21/05/2026

FORTIFY_SOURCE disabled

Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of service via memory errors that would otherwise be caught and safely terminated by runtime protection.