Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Multiple security vulnerabilities affecting Chromium have been addressed in a series of updates culminating in version 146.0.7680.177. These include use-after-free, heap buffer overflows, integer overflows, out-of-bounds reads and writes, insufficient policy enforcement, and incorrect security UI implementations across various components such as CSS, GPU, WebGL, V8, WebCodecs, Dawn, PDF, WebAudio, WebRTC, and others. The vulnerabilities are critical in nature and have been fixed in these Chromium releases.

This security update for Chromium addresses numerous critical vulnerabilities across multiple versions, specifically in releases 146.0.7680.71, 75, 80, 153, 164, and 177. The fixed issues include use-after-free bugs, heap and stack buffer overflows, integer overflows, out-of-bounds memory accesses, insufficient policy enforcement, inappropriate implementations, and incorrect security UI in various Chromium components such as V8 JavaScript engine, WebGL, WebAudio, WebRTC, ANGLE, Dawn, WebMIDI, PDFium, Blink, and others. These vulnerabilities could potentially lead to memory corruption, security bypasses, or information leakage if exploited. The update consolidates fixes for over 50 CVEs identified in the 2026 timeframe.

Detailed information about Security update for chromium affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation stra

Security update for chromium - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1259530

SUSE Bug 1259648

SUSE Bug 1259659

SUSE Bug 1259964

SUSE Bug 1260376

SUSE Bug 1261249

SUSE CVE CVE-2026-3909 page

SUSE CVE CVE-2026-3910 page

SUSE CVE CVE-2026-3913 page

SUSE CVE CVE-2026-3914 page

SUSE CVE CVE-2026-3915 page

SUSE CVE CVE-2026-3916 page

SUSE CVE CVE-2026-3917 page

SUSE CVE CVE-2026-3918 page

SUSE CVE CVE-2026-3919 page

SUSE CVE CVE-2026-3920 page

SUSE CVE CVE-2026-3921 page

SUSE CVE CVE-2026-3922 page

Security update for chromium

chromium

Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-4446 is a use-after-free vulnerability identified in the WebRTC module of Google Chrome versions before 146.0.7680.153. WebRTC (Web Real-Time Communication) is a framework enabling real-time audio, video, and data sharing directly between browsers without plugins. The vulnerability arises when Chrome improperly manages memory in WebRTC, freeing an object while it is still accessible, leading to use-after-free conditions. An attacker can exploit this by delivering a specially crafted HTML page that triggers heap corruption, potentially allowing arbitrary code execution or crashing the browser. The vulnerability requires no privileges and only user interaction (visiting a malicious page). The CVSS v3.1 score of 8.8 reflects the ease of remote exploitation, the lack of authentication, and the high impact on confidentiality, integrity, and availability. Although no exploits are known in the wild yet, the flaw poses a significant risk due to Chrome's extensive user base and WebRTC's widespread use in communication applications. The vulnerability was publicly disclosed on March 20, 2026, and users are urged to update to version 146.0.7680.153 or later where the issue is resolved.

Detailed information about CVE-2026-4446: Use after free in Google Chrome affecting Google Chrome. Get real-time updates, technical details, and mitigation stra

CVE-2026-4446: Use after free in Google Chrome - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-4446: Use after free in Google Chrome


Security update for chromiumCVE-2026-3909 0 Multiple security vulnerabilities affecting Chromium have been addressed in a series of updates culminating in version 146.0.7680.177. These include use-after-free, heap buffer overflows, integer overflows, out-of-bounds reads and writes, insufficient policy enforcement, and incorrect security UI implementations across various components such as CSS, GPU, WebGL, V8, WebCodecs, Dawn, PDF, WebAudio, WebRTC, and others. The vulnerabilities are critical in nature and have been fixed in these Chromium releases. CriticalVulnerability#gcve #csaf #cve-2026-3909 Join the discussion	GCVE Database	08/31/2026, 08:40:11 UTC Added: 09/17/2026, 01:59:41 UTC
CVE-2026-4446: Use after free in Google ChromeCVE-2026-4446 0 Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) HighVulnerabilityUnited StatesUnited KingdomGermany+7#cve #cve-2026-4446 Join the discussion	CVE Database V5	03/20/2026, 01:34:47 UTC Added: 03/20/2026, 02:24:22 UTC

Threats Tagged 'cve-2026-4446'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-4446'

Lead Pen Test Professional