Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

chromium

A security update for Chromium addresses multiple vulnerabilities including integer overflows, heap buffer overflows, use-after-free issues, and inappropriate implementations in various components such as ANGLE, PowerVR, Skia, DevTools, WebAudio, CSS, WebAssembly, V8, WebCodecs, Media, PDFium, and WebGPU. The affected versions range from 145.0.7632.45 through 145.0.7632.159. These vulnerabilities have been assigned CVE identifiers from CVE-2026-2313 to CVE-2026-3545. The update also includes packaging and build improvements. No explicit patch links or vendor advisory details were provided.

This security update for Chromium fixes multiple vulnerabilities across versions 145.0.7632.45 to 145.0.7632.159. The vulnerabilities include integer overflows, heap buffer overflows, use-after-free bugs, and inappropriate implementations affecting components such as ANGLE, PowerVR, Skia, DevTools, WebAudio, CSS, WebAssembly, V8, WebCodecs, Media, PDFium, and WebGPU. The update addresses a broad range of CVEs from CVE-2026-2313 through CVE-2026-3545 and also includes packaging and build improvements. No vendor advisory or patch links were provided in the input data.

Detailed information about Security update for chromium affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation stra

Security update for chromium - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1258116

SUSE Bug 1258185

SUSE Bug 1258199

SUSE Bug 1258438

SUSE Bug 1258733

SUSE Bug 1259213

SUSE CVE CVE-2026-2313 page

SUSE CVE CVE-2026-2314 page

SUSE CVE CVE-2026-2315 page

SUSE CVE CVE-2026-2316 page

SUSE CVE CVE-2026-2317 page

SUSE CVE CVE-2026-2318 page

SUSE CVE CVE-2026-2319 page

SUSE CVE CVE-2026-2320 page

SUSE CVE CVE-2026-2321 page

SUSE CVE CVE-2026-2322 page

SUSE CVE CVE-2026-2323 page

SUSE CVE CVE-2026-2441 page

Security update for chromium

Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-2650 is a heap buffer overflow vulnerability identified in the Media component of Google Chrome prior to version 145.0.7632.109. The vulnerability arises from improper handling of heap memory during media processing, which can be exploited by a remote attacker through a specially crafted HTML page. When a user visits such a page, the attacker can trigger heap corruption, potentially leading to arbitrary code execution within the context of the browser. The vulnerability does not require any privileges or authentication, but does require user interaction in the form of visiting a malicious or compromised website. The CVSS v3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Although no exploits have been observed in the wild yet, the nature of the vulnerability and the widespread use of Chrome make it a critical issue. The flaw affects all Chrome installations prior to the patched version 145.0.7632.109, which is widely deployed across consumer and enterprise environments. The vulnerability is particularly dangerous because it targets the media processing subsystem, often a complex and less scrutinized area, increasing the risk of exploitation. The lack of publicly available patches or exploit code at the time of publication means organizations must rely on prompt updates once patches are released and employ defense-in-depth strategies to mitigate risk.

Detailed information about CVE-2026-2650: Heap buffer overflow in Google Chrome affecting Google Chrome. Get real-time updates, technical details, and mitigatio

CVE-2026-2650: Heap buffer overflow in Google Chrome - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2650: Heap buffer overflow in Google Chrome


Security update for chromiumCVE-2026-2313 0 A security update for Chromium addresses multiple vulnerabilities including integer overflows, heap buffer overflows, use-after-free issues, and inappropriate implementations in various components such as ANGLE, PowerVR, Skia, DevTools, WebAudio, CSS, WebAssembly, V8, WebCodecs, Media, PDFium, and WebGPU. The affected versions range from 145.0.7632.45 through 145.0.7632.159. These vulnerabilities have been assigned CVE identifiers from CVE-2026-2313 to CVE-2026-3545. The update also includes packaging and build improvements. No explicit patch links or vendor advisory details were provided. HighVulnerability#gcve #csaf #cve-2026-2313 Join the discussion	GCVE Database	08/31/2026, 08:39:48 UTC Added: 09/17/2026, 01:59:47 UTC
CVE-2026-2650: Heap buffer overflow in Google ChromeCVE-2026-2650 0 Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) HighVulnerabilityUnited StatesChinaIndia+11#cve #cve-2026-2650 Join the discussion	CVE Database V5	02/18/2026, 21:39:04 UTC Added: 02/18/2026, 21:56:14 UTC

Threats Tagged 'cve-2026-2650'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-2650'

Lead Pen Test Professional