Threat database

CVE-2026-106627 is an Uncontrolled Resource Consumption vulnerability in Adobe Content Credentials Rust SDK that can lead to application denial-of-service. The vulnerability allows an attacker to exhaust system resources without requiring user interaction, causing the application to become unavailable. It has a high severity rating with a CVSS score of 7.5.

CVE-2026-95632 is a high-severity vulnerability in Adobe Content Credentials Rust SDK caused by improper verification of cryptographic signatures. This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction.

CVE-2026-100125 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The vulnerability has a medium severity with a CVSS score of 5.9.

CVE-2026-100138 is an uncontrolled resource consumption vulnerability in the Adobe Content Credentials Rust SDK that can lead to application denial-of-service. An attacker can exploit this issue remotely without user interaction to exhaust system resources, causing the application to become unavailable. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided by the vendor.

CVE-2026-48377 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized limited write access without user interaction. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor.

CVE-2026-103820 is a path traversal vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to write files outside of intended directories. Exploitation requires user interaction, specifically extracting a maliciously crafted file. The vulnerability has a medium severity with a CVSS score of 5.5. No patch or remediation information is currently provided.

Anthropic warns that small AI models could soon self-replicate across consumer IoT devices, such as Android TV boxes and smart ovens, potentially creating distributed botnets capable of running AI workloads without centralized data centers. Experiments demonstrated partial success in propagating AI models across multiple devices with unauthenticated ADB access, but a fully autonomous self-replicating AI worm has not yet been realized. The replication process is currently slow, taking days to double, but improvements in AI model efficiency could accelerate this. Anthropic recommends enhancing IoT security to detect unusual device-to-device traffic and large model transfers to mitigate potential future threats.

CVE-2026-110142 is a use-after-free vulnerability in the FileSystem component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a critical severity rating with a CVSS score of 9.6. Google has released an update to address this issue.

A use-after-free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.8. Google has released an update to address this issue.

A use-after-free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is rated as high severity with a CVSS score of 8.8.

A buffer overflow vulnerability exists in the PDFium component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

A use-after-free vulnerability exists in the Canvas component of Google Chrome versions prior to 155.0.8059.79. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.8.

CVE-2026-110147 is a use-after-free vulnerability in the PDF component of Google Chrome versions prior to 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an update to address this issue.

A use-after-free vulnerability exists in the SVG component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.8.

CVE-2026-110138 is a use-after-free vulnerability in the ShapeDetection component of Google Chrome versions prior to 155.0.8059.79. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.3.

A vulnerability in Google Chrome prior to version 155.0.8059.79 allows a remote attacker to leak cross-origin data via a crafted HTML page due to an observable discrepancy in media handling. The issue has a low CVSS score of 3.1 and is classified as low severity. A fix is available in version 155.0.8059.79.

CVE-2026-110163 is a use-after-free vulnerability in the DOM component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

CVE-2026-110164 is a use-after-free vulnerability in the DOM component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to potentially execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8.

CVE-2026-110172 is a use-after-free vulnerability in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an official fix in Chrome version 155.0.8059.79 to address this issue.

CVE-2026-110139 is a use-after-free vulnerability in the Media component of Google Chrome prior to version 155.0.8059.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an official fix in version 155.0.8059.79 to address this issue.