https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 25 Aug 2026 16:40:29 +0000 https://vulnerability.circl.lu/vuln/cve-2025-36939 Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow. Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow. https://vulnerability.circl.lu/vuln/cve-2025-36939 Mon, 24 Aug 2026 16:38:45 +0000 https://vulnerability.circl.lu/vuln/cve-2025-36940 Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) https://vulnerability.circl.lu/vuln/cve-2025-36940 Mon, 24 Aug 2026 16:33:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-12710 Missing Authorization in Application Integration QueryEngineTask Missing Authorization in Application Integration QueryEngineTask https://vulnerability.circl.lu/vuln/cve-2026-12710 Sat, 22 Aug 2026 08:13:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76023 Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76023 Thu, 20 Aug 2026 20:51:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76022 Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76022 Thu, 20 Aug 2026 20:51:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76021 Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76021 Thu, 20 Aug 2026 20:51:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76020 Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76020 Thu, 20 Aug 2026 20:51:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76019 Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76019 Thu, 20 Aug 2026 20:51:19 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76018 Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) https://vulnerability.circl.lu/vuln/cve-2026-76018 Thu, 20 Aug 2026 20:51:19 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76017 Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) https://vulnerability.circl.lu/vuln/cve-2026-76017 Thu, 20 Aug 2026 20:51:19 +0000