Threat Intelligence Feed

MED · CVE-2026-24226 NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation MED · CVE-2026-24220 NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an uns MED · CVE-2026-15778 Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attac HIGH · CVE-2026-15777 Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to HIGH · CVE-2026-15776 Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitra MED · CVE-2026-15775 Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same ori HIGH · CVE-2026-15774 Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the render CRIT · CVE-2026-15773 Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perf HIGH · CVE-2026-15772 Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised MED · CVE-2026-15771 Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote MED · CVE-2026-15770 Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensiti HIGH · CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 al MED · CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to HIGH · CVE-2026-15767 Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute MED · CVE-2026-15766 Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensi HIGH · CVE-2026-15765 Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engag HIGH · CVE-2026-15764 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user MED · CVE-2026-15749 A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function e HIGH · CVE-2026-15738 Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 HIGH · CVE-2026-15643 AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants CRIT · CVE-2026-53633 Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode expo MED · CVE-2026-50659 Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. HIGH · CVE-2026-50651 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw HIGH · CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p HIGH · CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. HIGH · CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o HIGH · CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. HIGH · CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. HIGH · CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. HIGH · CVE-2026-50526 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tamperin HIGH · CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw HIGH · CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a MED · CVE-2026-48784 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4 MED · CVE-2026-48761 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4 MED · CVE-2026-48760 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4 MED · CVE-2026-48747 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8. HIGH · CVE-2026-48736 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 to 5.4.53, HIGH · CVE-2026-48489 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4 MED · CVE-2026-48371 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged CRIT · CVE-2026-48359 Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t MED · CVE-2026-24226 NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation MED · CVE-2026-24220 NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an uns MED · CVE-2026-15778 Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attac HIGH · CVE-2026-15777 Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to HIGH · CVE-2026-15776 Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitra MED · CVE-2026-15775 Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same ori HIGH · CVE-2026-15774 Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the render CRIT · CVE-2026-15773 Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perf HIGH · CVE-2026-15772 Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised MED · CVE-2026-15771 Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote MED · CVE-2026-15770 Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensiti HIGH · CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 al MED · CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to HIGH · CVE-2026-15767 Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute MED · CVE-2026-15766 Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensi HIGH · CVE-2026-15765 Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engag HIGH · CVE-2026-15764 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user MED · CVE-2026-15749 A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function e HIGH · CVE-2026-15738 Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 HIGH · CVE-2026-15643 AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants CRIT · CVE-2026-53633 Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode expo MED · CVE-2026-50659 Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. HIGH · CVE-2026-50651 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw HIGH · CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p HIGH · CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. HIGH · CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o HIGH · CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. HIGH · CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. HIGH · CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. HIGH · CVE-2026-50526 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tamperin HIGH · CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw HIGH · CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a MED · CVE-2026-48784 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4 MED · CVE-2026-48761 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4 MED · CVE-2026-48760 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4 MED · CVE-2026-48747 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8. HIGH · CVE-2026-48736 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 to 5.4.53, HIGH · CVE-2026-48489 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4 MED · CVE-2026-48371 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged CRIT · CVE-2026-48359 Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t