CVE-2026-95322 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android. It affects versions prior to 154.0.8037.57. A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to execute arbitrary code outside the sandbox. The vulnerability has a high CVSS score of 8.3 and was publicly disclosed on September 29, 2026. Google has released an update to address this issue.
A critical buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
A critical buffer overflow vulnerability exists in the WebGL component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-95313 is a critical use-after-free vulnerability in the Fullscreen feature of Google Chrome versions prior to 154.0.8037.57. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95339 is a critical use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. Google has released an official fix in Chrome version 154.0.8037.57 to address this issue.
CVE-2026-95357 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android. It affects versions prior to 154.0.8037.57 and could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
A critical buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-102761 is a critical out-of-bounds write vulnerability in the Eclipse Foundation's NetX Duo WebSocket client. The flaw arises because the unmasking cursor resets incorrectly when processing chained packets, causing an XOR loop to write attacker-controlled data beyond intended memory boundaries. This vulnerability affects versions 6.2.0 through 6.5.1.202602 of NetX Duo.
The npm package 'sk-lib-enc' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package does not guarantee elimination of all malicious software introduced by it. Immediate rotation of all secrets and keys from a different, uncompromised computer is strongly recommended.
CVE-2026-102760 is a use-after-free vulnerability in Eclipse Foundation's NetX Duo when built with NX_SECURE_KEY_CLEAR. The vulnerability occurs because TLS records are wiped after being handed to TCP, which may have already released the packet memory. This leads to memory corruption by writing zeros into freed or reused packets, causing an underflow and out-of-bounds memory write.
CVE-2026-102759 is a medium severity vulnerability in Eclipse Foundation's NetX Duo where the NetX Secure TLS component improperly validates the integrity check value. Specifically, it accepts an empty TLS application-data record without verifying its message authentication code (MAC), treating such records as valid and advancing the receive sequence number without MAC comparison. Empty TLS application-data records are legal and commonly used in TLS 1.0 as a mitigation against the BEAST attack.
CVE-2026-102758 is a buffer over-read vulnerability in the Eclipse Foundation NetX Duo library's function _nx_secure_x509_asn1_tlv_block_parse(). This function reads an ASN.1 tag byte from a buffer before verifying the buffer length, potentially reading one byte beyond the buffer when the remaining length is zero. The vulnerability affects X.509 certificate parsing during TLS handshakes. The issue can cause an out-of-bounds read but does not impact confidentiality or integrity, only availability. The affected versions are from 0 up to and including 6.5.1.202602.
CVE-2026-102757 is a high-severity vulnerability in the Eclipse Foundation's ThreadX real-time operating system. It allows an unprivileged, memory-protected module to manipulate kernel memory in privileged mode, bypassing isolation boundaries by clearing the MPU enable bit. This occurs due to improper validation in the Module Manager's object dereference logic, enabling an attacker to craft addresses that pass checks incorrectly and gain privileged memory access.
DARPA has selected Xint to develop AI-driven technology for securing military messaging applications by analyzing source code and binaries to detect vulnerabilities. This technology aims to protect Department of War communications from external threats, including foreign eavesdropping, by examining the entire attack surface of messaging apps and related system components. Xint's solution uses advanced AI models to triage vulnerabilities and generate patches automatically. The technology is also offered as a SaaS for commercial customers to scan and secure their software before release and continuously thereafter. While still evolving, the service currently supports cloud-based scanning, with efforts underway to enable on-premises use for sensitive environments. This initiative represents a significant advancement in autonomous application security analysis but does not describe a specific vulnerability or exploit.
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in handle_create_content and handle_clone_content to write files outside the project directory via directory traversal.
Marmite versions up to 0.4.2 have a path traversal vulnerability in the development server started with the --serve option. This flaw allows unauthenticated attackers to read arbitrary files by exploiting improper handling of encoded path traversal sequences. The vulnerability arises because the handle_request function does not correctly reject '..' segments after percent-decoding the request path, enabling access to files readable by the marmite process.
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller.
PX4 Autopilot versions up to 1.17.0 have a NULL pointer dereference vulnerability in the sd_stress command. This occurs because the -b byte count parameter is not validated before being used in memory allocation functions. An attacker with shell access, including via MAVLink, can supply invalid values to cause the flight controller to crash. The vulnerability has a high severity score of 7.1. No patch or remediation details are provided in the available data.
The npm package @xoxo-momo/kit contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.