Threat database

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

A type confusion vulnerability in the V8 engine of Google Chrome prior to version 154.0.8037.92 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page. This vulnerability has a high severity rating and affects Chrome desktop versions before the specified fixed release.

A use-after-free vulnerability exists in the Bluetooth component of Google Chrome prior to version 154.0.8037.92. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating and a CVSS score of 9.6, indicating critical impact.

A type confusion vulnerability exists in the V8 JavaScript engine of Google Chrome prior to version 154.0.8037.92. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating and a CVSS score of 8.8.

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)

Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

A critical buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android versions prior to 154.0.8037.92. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.

Dockhand versions before 1.0.36 have an open redirect vulnerability in the OIDC initiation endpoint. This flaw allows unauthenticated attackers to redirect authenticated users to malicious sites by manipulating a redirect query parameter. Exploitation can lead to capturing authorization codes through the Referer header and enable credential phishing attacks targeting Dockhand accounts after legitimate logins. The vulnerability has a medium severity with a CVSS score of 5.3.

CVE-2026-102252 is a path traversal vulnerability in Google OSV-SCALIBR's embedded VMDK filesystem extractor versions 0.3.6 through 0.5.0. This flaw allows an attacker controlling the scan target to write arbitrary files outside the intended extraction directory on the host system by exploiting insufficient validation of archive path entries in crafted VMDK images.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains hardcoded cloud-API credentials shared across devices. These credentials are embedded in the public firmware package, allowing unauthorized users to interact with the cloud service beyond intended operations. This vulnerability is identified as CWE-798 and has a high severity rating with a CVSS score of 7.5.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 has a vulnerability where the update mechanisms, both local and cloud, do not perform cryptographic signature verification on new firmware. Instead, they rely solely on basic hashing, allowing an attacker with access to the update routine to install untrusted firmware. This flaw can lead to full compromise of the device's confidentiality, integrity, and availability.

CVE-2026-100292 is a high-severity OS command injection vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. It involves a hidden debug interface that can be enabled via an authenticated request, allowing additional commands to be sent to a backend service. This can expose system-level functionality that may be misused if crafted inputs reach the command handler.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a critical vulnerability where several ONVIF service endpoints do not enforce required authentication. This allows unauthorized attackers to access sensitive device management operations. The vulnerability is identified as CWE-1188, involving insecure default initialization of resources. The CVSS score is 9.8, indicating a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

CVE-2026-96274 affects the Baicells Nova 430H eNodeB (model pBS3101SH). An unauthenticated device within radio range can send a malformed uplink message with an invalid NAS payload during connection setup. The eNodeB improperly validates this payload and forwards it to the core network, causing a shutdown of the signaling association for the cell. This leads to temporary service disruption until connectivity is restored. A patch is available to address this vulnerability.

CVE-2026-76738 is a buffer overflow vulnerability in the API endpoint of Hewlett Packard Enterprise (HPE) Instant ON. It requires an authenticated attacker with administrative privileges to exploit. Successful exploitation can cause a denial of service by interrupting the normal operation of the affected service, which recovers automatically without manual intervention. The vulnerability has a low CVSS score of 2.7 and does not impact confidentiality or integrity.

CVE-2026-76737 is an authenticated path traversal vulnerability in the command line interface of Hewlett Packard Enterprise (HPE) Networking Instant On. An attacker with administrative privileges could exploit this flaw to modify certain files on the underlying operating system and disrupt the affected service's normal operation. The vulnerability affects versions up to and including 3.4.1.0. The CVSS score is 3.0, indicating low severity.

CVE-2026-76736 is a buffer overflow vulnerability in the underlying operating system of Hewlett Packard Enterprise (HPE) Instant ON networking devices. It can be exploited by a low-privilege authenticated local attacker to disrupt the normal operation of the affected service. The vulnerability does not impact confidentiality or integrity but can cause availability issues. The CVSS score is 3.3, indicating low severity. The affected versions are from 0.0.0.0 up to and including 3.4.1.0. There is no information about available patches or exploits in the wild.

CVE-2026-76735 is a medium severity vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking devices. It allows an authenticated local attacker with high privileges to disclose sensitive information from the underlying operating system. Exploitation requires certain preconditions outside the attacker's control. The vulnerability does not affect confidentiality, integrity, or availability beyond information disclosure. No known exploits are reported in the wild. Affected versions include all releases up to and including 3.4.1.0.

CVE-2026-76734 is a memory corruption vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking product. It allows an unauthenticated remote attacker to cause a denial of service by disrupting normal service operation and potentially accessing limited information within the affected component. The vulnerability has a medium severity with a CVSS score of 4.8. It affects versions from 0.0.0.0 up to and including 3.4.1.0. No known exploits are reported in the wild, and no patch or remediation details are provided.