Browse CVEs

HIGH 8.1 CVE-2026-43631 llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-se… No fix yet Fix from $1,9502026-08-06 MEDIUM 6.5 CVE-2026-43630 llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers wit… Patch available Fix from $1,6002026-08-06 HIGH 8.1 CVE-2026-43629 llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the state_read_data() func… No fix yet Fix from $1,9502026-08-06 HIGH 7.8 CVE-2026-43628 llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated… No fix yet Fix from $1,9502026-08-06 HIGH 7.8 CVE-2026-43627 llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in … No fix yet Fix from $1,9502026-08-06 CRITICAL 9.1 CVE-2026-3418 The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be … No fix yet Fix from $2,3002026-08-06 HIGH 8.7 CVE-2026-3415 The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain condit… No fix yet Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19177 Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer … Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-19176 Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitra… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 CRITICAL 9.6 CVE-2026-19175 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted H… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 HIGH 7.8 CVE-2026-1289 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vul… No fix yet Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19174 Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19173 Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19172 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 CRITICAL 9.6 CVE-2026-19171 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a c… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 CRITICAL 9.6 CVE-2026-19170 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a c… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 HIGH 8.8 CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privileg… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19168 Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via … Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 CRITICAL 9.6 CVE-2026-19166 Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-19165 Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to ex… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 CRITICAL 9.6 CVE-2026-19164 Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sand… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 HIGH 8.3 CVE-2026-19163 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pot… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19162 Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-19159 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to … Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-19158 Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI g… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 CRITICAL 9.6 CVE-2026-19157 Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape vi… Chrome 151.0.7922.109+ Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-19156 Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19155 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19154 Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pote… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.1 CVE-2026-19153 Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rend… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06