Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.3 HIGH
CVE-2026-10889 — ANGLE Out-of-Bounds Read Sandbox Escape

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10888 — Google Chrome Cast Streaming Use After Free

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security s…

chrome chrome | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.1 HIGH
CVE-2026-10887 — Google Chrome Use-After-Free Remote Code Execution

Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
9.6 CRITICAL
CVE-2026-10886 — Google Chrome Use-After-Free Sandbox Escape

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10885 — Google Chrome iOS Use-After-Free Remote Code Execution

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10884 — Chromecast Use-After-Free Sandbox Escape

Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10883 — ANGLE Type Confusion Heap Corruption

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10882 — Google Chrome Use-After-Free in Network

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
9.6 CRITICAL
CVE-2026-10881 — ANGLE Out-of-Bounds Read/Write Sandbox Escape

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
6.5 MEDIUM
CVE-2026-10875 — projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument…

online_art_gallery_shop_project | Remote | Injection
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
6.5 MEDIUM
CVE-2026-10874 — projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument soc…

online_art_gallery_shop_project | Remote | Injection
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
8.3 HIGH
CVE-2026-10873 — Shibby Tomato Web UI rstats rstats_path os command injection

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command inject…

tomato | Remote | Injection
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
8.3 HIGH
CVE-2026-10872 — Shibby Tomato Web UI rc start_vpnserver os command injection

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command inj…

tomato | Remote | Injection
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
8.7 HIGH
CVE-2025-8873 — Arista EOS Dataplane Denial of Service via Malformed IPsec Packet

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detect this condition, a…

eos eos | Remote | Denial of Service
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
9.6 CRITICAL
CVE-2024-27892 — On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request c…

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the swi…

eos eos | Remote | Authorization
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
6.9 MEDIUM
CVE-2024-27891 — On affected platforms running Arista EOS with MACsec and egress ACLs configured on the sa…

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgo…

eos eos | Remote | Misconfiguration
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
9.6 CRITICAL
CVE-2024-27890 — On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request c…

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the swi…

eos eos | Remote | Authorization
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
8.2 HIGH
CVE-2023-5502 — On affected platforms running Arista EOS with 802.1x authentication configured on the acc…

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to by…

eos eos | Remote | Authentication
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
5.4 MEDIUM
CVE-2026-42547 — IRIS Alerts Can be Falsely Attributed to Customers

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assi…

iris | Remote | Authorization
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
4.3 MEDIUM
CVE-2026-42543 — IRIS has a Cross-Site Request Forgery (CSRF) issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request forgery attack, beca…

iris | Remote | Cross-Site Request Forgery
Jun 04, 2026 Jun 04, 2026
Jun 04, 2026
Jun 04, 2026
Showing 20 of 7360 Results