A use-after-free vulnerability exists in the WebGL component of Google Chrome on Android versions prior to 153.0.8010.36. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated critical with a CVSS score of 9.6.
CVE-2026-87464 is a critical use-after-free vulnerability in the WebGL component of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component affecting Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and impacts multiple specific builds of Windows 11 version 23H2. An official fix is available from Microsoft.
CVE-2026-69612 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 involving an absolute path traversal flaw in Windows Error Reporting. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple specific builds of Windows 10 and earlier versions. An official fix is available from Microsoft.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw could allow an unauthenticated remote attacker to gain unauthorized access. The vulnerability is identified as CWE-295 and has a high severity with a CVSS score of 7.6. No official patch or remediation details are provided in the input data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 and Appliance versions prior to 5.36.00.16 contain an improper certificate validation vulnerability. This flaw allows a low privileged attacker with local access to potentially exploit server-side request forgery. The vulnerability is identified as CWE-295 and has a CVSS 3.1 score of 5.5, indicating medium severity. No official patch or remediation details are provided in the available data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 for the appliance and prior to 5.36.00.00 for the application contain a vulnerability involving improper validation of certificates with host mismatches. This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability is identified as CWE-297 and has a medium severity with a CVSS score of 4.8.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 for the appliance and prior to 5.36.00.00 for the application contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially bypass protection mechanisms. The vulnerability is identified as CWE-295 and has a CVSS 3.1 base score of 7.3, indicating high severity. No official patch links are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain a Use of Incorrect Operator vulnerability (CWE-480). This flaw could allow an unauthenticated remote attacker to gain unauthorized access. The vulnerability is rated high severity with a CVSS 3.1 score of 7.3, indicating it is exploitable over the network without privileges or user interaction and can impact confidentiality, integrity, and availability.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access. The vulnerability is identified as CWE-295 and has a high severity with a CVSS score of 7.4. No explicit patch or remediation details are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain a vulnerability where critical functions lack proper authentication. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access. The vulnerability is identified as CWE-306: Missing Authentication for Critical Function. It has a high severity with a CVSS score of 8.2.
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a vulnerability due to the use of hard-coded credentials. This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability is identified as CWE-798 and has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially bypass protection mechanisms. The vulnerability is identified as CWE-295 and has a medium severity with a CVSS score of 5.9. No known exploits are reported in the wild. Patch information is not provided in the source data.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain a path traversal vulnerability (CWE-22). This flaw allows an unauthenticated remote attacker to potentially execute remote code by exploiting improper limitation of pathname to restricted directories. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. No official patch or remediation details are provided in the available data. No known exploits in the wild have been reported.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw could allow an unauthenticated remote attacker to gain unauthorized access. The vulnerability is rated high severity with a CVSS score of 7.4. No official patch or vendor advisory details are provided in the input data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper privilege management vulnerability. This flaw allows a low privileged attacker with local access to potentially elevate their privileges. The vulnerability has a medium severity with a CVSS score of 5.5. No public exploits or vendor patch information is currently provided.