https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:06:32 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18397 <p>This vulnerability enables unauthenticated remote code execution (RCE) on a victim&#39;s machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.</p> <p>The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.</p> <p>This vulnerability enables unauthenticated remote code execution (RCE) on a victim&#39;s machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.</p> <p>The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-18397 https://vulnerability.circl.lu/vuln/ghsa-cq27-3937-pqqv <p>This vulnerability enables unauthenticated remote code execution (RCE) on a victim&#39;s machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.</p> <p>The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.</p> <p>This vulnerability enables unauthenticated remote code execution (RCE) on a victim&#39;s machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.</p> <p>The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.</p> https://vulnerability.circl.lu/vuln/ghsa-cq27-3937-pqqv