Total
11780 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-79018 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-79274 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 4.3 MEDIUM |
| Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-79291 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79293 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-78981 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. (Chromium security severity: Low) | |||||
| CVE-2026-78893 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-78896 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 4.3 MEDIUM |
| Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-79207 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium security severity: Low) | |||||
| CVE-2026-79193 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 4.3 MEDIUM |
| Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79125 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-79122 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 5.9 MEDIUM |
| Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium) | |||||
| CVE-2026-79124 | 1 Google | 2 Android, Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-79024 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 6.5 MEDIUM |
| Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79034 | 1 Google | 1 Chrome | 2026-08-27 | N/A | 3.1 LOW |
| Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-76262 | 1 Splunk | 1 Splunk | 2026-08-26 | N/A | 7.5 HIGH |
| In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterprise versions below 10.4. The information disclosure is possible because the Prometheus metrics endpoint in the Edge Processor SPL2 Preview sidecar lacks authentication, which lets any client that can reach the sidecar retrieve the metrics without credentials. For more information see About Splunk sidecars (https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/splunk-sidecars/about-splunk-sidecars) in the Splunk documentation. | |||||
| CVE-2026-79055 | 1 Google | 2 Android, Chrome | 2026-08-26 | N/A | 5.1 MEDIUM |
| Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low) | |||||
| CVE-2011-4088 | 2 Fedoraproject, Redhat | 5 Fedora, Automatic Bug Reporting Tool, Enterprise Linux Desktop and 2 more | 2026-08-26 | 5.0 MEDIUM | 7.5 HIGH |
| ABRT might allow attackers to obtain sensitive information from crash reports. | |||||
| CVE-2026-79001 | 2 Apple, Google | 2 Macos, Chrome | 2026-08-26 | N/A | 5.3 MEDIUM |
| Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-54673 | 1 Electron | 2 Builder-util-runtime, Electron-builder | 2026-08-26 | N/A | 6.5 MEDIUM |
| electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler (HttpExecutor.prepareRedirectUrlOptions) only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers — most notably PRIVATE-TOKEN (used by GitLab's personal access token flow) and mixed-case Authorization (used by GitLab's Bearer/OAuth flow) — were not stripped and could be forwarded to an attacker-controlled cross-origin redirect destination. This issue has been fixed in version 9.7.0. | |||||
| CVE-2026-73047 | 2026-08-26 | N/A | 6.2 MEDIUM | ||
| siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view Template calculation feature (introduced in v3.7.0-beta.1). The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and getHostByName functions that were removed elsewhere for CVE-2024-55660. A local, unauthenticated attacker (the kernel binds to 127.0.0.1 by default with no per-UID access control) can inject a malicious Template calculation formula to read environment variables belonging to the account running siyuan — including from a separate, unprivileged OS account — and to perform DNS lookups from the server's network position. | |||||