CVE Vulnerability Catalog

An inappropriate implementation in the ANGLE component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. The issue stems from incorrect security enforcement.

An inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The issue is rated as High severity in Chromium.

An integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform an out-of-bounds memory read via a crafted HTML page.

An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. This could lead to disclosure of sensitive data.

An out-of-bounds read vulnerability in the Dawn component of Google Chrome on Windows prior to version 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. (Chromium security severity: High)

An integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

A flaw was found in glib-networking where a specially crafted certificate chain with circular issuer relationships causes an infinite loop during certificate verification. This leads to excessive CPU consumption and denial of service for the affected process.

An integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

An uninitialized use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

In OpenStack Neutron before version 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources.

In TREK before version 3.0.18, a timing discrepancy during login allows an attacker to enumerate valid user accounts. Missing users cause an immediate response (~10 ms), while existing users trigger a bcrypt comparison (~370 ms), creating a ~14× timing difference detectable without status code or body changes.

The @utcp/http library before version 1.1.2 is vulnerable to blind Server-Side Request Forgery (SSRF). The flaw is caused by a trust-boundary inconsistency between manual discovery and tool invocation, where callTool() does not revalidate the URL and OpenApiConverter blindly trusts malicious OpenAPI specs.

In AutoGPT prior to version 0.6.59, the POST /api/blocks/{block_id}/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check in the graph execution path (manager.py) is never reached when blocks are called directly via the external API, allowing unlimited free execution of all blocks.

A vulnerability in Portainer Community Edition from version 2.33.0 to 2.33.7 allows writing files to arbitrary locations on the server filesystem via a crafted .tar.gz archive. The ExtractTarGz function does not prevent directory traversal, enabling overwriting of critical system files.

In Portainer Community Edition from version 2.33.0 to before 2.33.8 and 2.39.1, a missing authorization vulnerability in the GET /api/custom_templates/{id}/file endpoint allows any authenticated user to read custom template files by enumerating sequential IDs. These files may contain sensitive data such as connection strings, API tokens, or registry credentials.

A reflected cross-site scripting (XSS) vulnerability exists in URL handling. An attacker can inject malicious JavaScript code through a specially crafted link.

A vulnerability in the Kibana Fleet agent policy management feature allows privilege escalation. An authenticated user with Fleet management privileges can inject improperly validated values into a configuration override mechanism, causing Elastic Agents to be issued API keys with elevated Elasticsearch privileges.