Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113000
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113005
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113004
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113003
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113002
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a...
Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-112998
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-112997
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-112996
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-112994
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-112992
Critical · 9.6
CWE-119 Oct 20, 2026
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-65396
Medium · 5.5
CWE-119 Oct 19, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Macos
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-112373
Medium · 6.5
CWE-119 Oct 19, 2026
H3C Magic NX15 usrlist sub_416874 stack-based overflow
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
CVE-2025-55667
Medium · 5.5
CWE-119 Oct 19, 2026
A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5...
A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
CVE-2026-112108
Medium · 6.3
CWE-119 Oct 19, 2026
ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112107
Medium · 6.3
CWE-119 Oct 19, 2026
ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112094
Medium · 5.5
CWE-119 Oct 19, 2026
michaelrsweet mxml mxml-file.c mxml_load_data use after free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112073
Medium · 6.3
CWE-119 Oct 19, 2026
Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds
A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112036
Medium · 4.3
CWE-119 Oct 18, 2026
Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
CVE-2026-110920
High · 8.8
CWE-119 Oct 15, 2026
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110918
Medium · 4.3
CWE-119 Oct 15, 2026
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110917
Medium · 4.3
CWE-119 Oct 15, 2026
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110914
High · 8.8
CWE-119 Oct 15, 2026
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-110913
High · 8.8
CWE-119 Oct 15, 2026
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-45450
High · 8.3
CWE-119 Oct 15, 2026
Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-110958
Critical · 10.0
Public exploit CWE-119 Oct 15, 2026
Wavlink WN530HG4B api.cgi heap-based overflow
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."