|
191
|
5.4 |
MEDIUM
Network
|
microsoft
|
sharepoint_server
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
New
|
CWE-20
NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-47641
|
2026-06-11 00:59 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
192
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially per…
New
|
CWE-20
NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-11676
|
2026-06-11 00:32 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
New
|
CWE-416
Use After Free
|
CVE-2026-11681
|
2026-06-11 00:32 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
|
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-48574
|
2026-06-11 00:32 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via …
New
|
CWE-20
NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-11682
|
2026-06-11 00:27 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196
|
7.8 |
HIGH
Local
|
-
|
-
|
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to ex…
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-9045
|
2026-06-11 00:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197
|
7.8 |
HIGH
Local
|
-
|
-
|
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privile…
New
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2026-8637
|
2026-06-11 00:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198
|
- |
|
-
|
-
|
A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks…
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-8335
|
2026-06-11 00:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite sys…
New
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-7516
|
2026-06-11 00:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200
|
7.0 |
HIGH
Local
|
-
|
-
|
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
New
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2026-6090
|
2026-06-11 00:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
