Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.2 PACKETSTORM:222805

📄 Lyrion Music Server 9.2.0 metadata Persistent Cross Site Scripting_PACKETSTORM:222805

Lyrion Music Server version 9.2.0 stores media file metadata tags such as GENRE, ARTIST, and ALBUM exactly as written in the file and later renders...

N/A N/A PACKETSTORM
HIGH 7.3 PACKETSTORM:222760

📄 Craft CMS 5.9.5 Missing Authorization / Denial of Service_PACKETSTORM:222760

Craft CMS versions 5.9.5 and below suffer from a missing authorization vulnerability that can trigger an unwanted migration...

N/A N/A PACKETSTORM
HIGH 7.5 PACKETSTORM:222745

📄 WordPress Contest Gallery 28.1.4 SQL Injection_PACKETSTORM:222745

WordPress Contest Gallery plugin versions 28.1.4 and below suffer from a remote SQL injection vulnerability...

N/A N/A PACKETSTORM
HIGH 8.8 CVE-2026-11202

CVE-2026-11202_CVE-2026-11202

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sa...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11201

CVE-2026-11201_CVE-2026-11201

Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension t...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11191

CVE-2026-11191_CVE-2026-11191

Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory ...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11179

CVE-2026-11179_CVE-2026-11179

Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a crafted HTML p...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11092

CVE-2026-11092_CVE-2026-11092

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11091

CVE-2026-11091_CVE-2026-11091

Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory ...

Google Chrome 149.0.7827.53 CVE
HIGH 8.8 CVE-2026-11042

CVE-2026-11042_CVE-2026-11042

Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to...

Google Chrome 149.0.7827.53 CVE