|
241
|
8.8 |
HIGH
Network
|
siemens
|
sinec_ins
|
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injectio…
Update
|
CWE-78
OS Command
|
CVE-2026-46746
|
2026-06-13 03:08 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
242
|
6.5 |
MEDIUM
Network
|
devolutions
|
devolutions_server
|
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault to execute arbitra…
Update
|
CWE-78
OS Command
|
CVE-2026-10544
|
2026-06-13 03:07 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
243
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag…
New
|
CWE-416
Use After Free
|
CVE-2026-12023
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
244
|
5.3 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craft…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-12025
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
245
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML…
New
|
CWE-416
Use After Free
|
CVE-2026-12028
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT…
New
|
CWE-416
Use After Free
|
CVE-2026-12029
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted…
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-12030
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi…
New
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-12031
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249
|
3.1 |
LOW
Network
|
google
|
chrome
|
Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted…
New
|
CWE-346
Origin Validation Error
|
CVE-2026-12032
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250
|
5.3 |
MEDIUM
Network
|
google
|
chrome
|
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memo…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-12033
|
2026-06-13 03:04 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|