diff --git a/data/2025/11xxx/CVE-2025-11395.json b/data/2025/11xxx/CVE-2025-11395.json index 7ba7c45044..6fe760a9b2 100644 --- a/data/2025/11xxx/CVE-2025-11395.json +++ b/data/2025/11xxx/CVE-2025-11395.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2025-10-07T03:14:35.482Z", "datePublished": "2026-09-15T22:59:03.366Z", - "dateUpdated": "2026-11-05T14:47:36.610Z" + "dateUpdated": "2026-11-11T22:54:47.290Z" }, "containers": { "cna": { @@ -192,12 +192,30 @@ "cpe:/a:redhat:enterprise_linux:9::appstream" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9.8 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "podman", + "defaultStatus": "affected", + "versions": [ + { + "version": "6:5.8.2-10.el9_8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_eus:9.8::appstream" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "buildah", - "defaultStatus": "affected", + "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] @@ -267,7 +285,7 @@ "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "skopeo", - "defaultStatus": "affected", + "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:openshift:4" ] @@ -358,6 +376,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99093", + "name": "RHSA-2026:99093", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-11395", "tags": [ @@ -415,7 +441,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-05T14:47:36.610Z" + "dateUpdated": "2026-11-11T22:54:47.290Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/108xxx/CVE-2026-108094.json b/data/2026/108xxx/CVE-2026-108094.json index 3fdf5a0606..fc26aa1019 100644 --- a/data/2026/108xxx/CVE-2026-108094.json +++ b/data/2026/108xxx/CVE-2026-108094.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-09T13:14:56.844Z", "datePublished": "2026-10-12T14:43:09.674Z", - "dateUpdated": "2026-11-06T08:15:58.976Z" + "dateUpdated": "2026-11-11T22:35:16.667Z" }, "containers": { "cna": { @@ -54,8 +54,16 @@ "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "mutter", "defaultStatus": "affected", + "versions": [ + { + "version": "0:49.4-6.el10_3.1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" + "cpe:/o:redhat:enterprise_linux:10.3" ] }, { @@ -90,6 +98,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99130", + "name": "RHSA-2026:99130", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-108094", "tags": [ @@ -147,7 +163,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T08:15:58.976Z" + "dateUpdated": "2026-11-11T22:35:16.667Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/119xxx/CVE-2026-119777.json b/data/2026/119xxx/CVE-2026-119777.json index cf635751de..8f49d0cd71 100644 --- a/data/2026/119xxx/CVE-2026-119777.json +++ b/data/2026/119xxx/CVE-2026-119777.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-30T16:19:44.205Z", "datePublished": "2026-10-30T17:59:41.041Z", - "dateUpdated": "2026-11-11T13:51:31.269Z" + "dateUpdated": "2026-11-11T22:35:11.648Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gstreamer1-plugins-bad-free", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.26.7-2.el10_2.8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", @@ -106,6 +124,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99118", + "name": "RHSA-2026:99118", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-119777", "tags": [ @@ -160,7 +186,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T13:51:31.269Z" + "dateUpdated": "2026-11-11T22:35:11.648Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/125xxx/CVE-2026-125637.json b/data/2026/125xxx/CVE-2026-125637.json new file mode 100644 index 0000000000..ecb4de710b --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125637.json @@ -0,0 +1,130 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125637", + "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "state": "PUBLISHED", + "assignerShortName": "redhat", + "dateReserved": "2026-11-10T04:57:41.730Z", + "datePublished": "2026-11-11T22:35:12.202Z", + "dateUpdated": "2026-11-11T22:35:12.202Z" + }, + "containers": { + "cna": { + "title": "Konflux-ci: unvalidated hostname fields enable caddyfile config injection in the konflux ui proxy generator, allowing an unauthenticated route to be spliced ahead of the forward_auth/impersonate authorization chain", + "metrics": [ + { + "other": { + "content": { + "value": "Important", + "namespace": "https://access.redhat.com/security/updates/classification/" + }, + "type": "Red Hat severity rating" + } + }, + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "HIGH", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "version": "3.1" + }, + "format": "CVSS" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in the Konflux UI proxy. Hostname values defined in the KonfluxUI custom resource are inserted directly into proxy configuration files without adequate validation or sanitization. An authenticated user with permissions to modify the custom resource can inject malicious configuration directives to bypass authentication and authorization controls, potentially exposing internal backend services. In addition, providing malformed input can cause the configuration generator to fail, resulting in a denial of service (DoS) by preventing the proxy from starting." + } + ], + "affected": [ + { + "versions": [ + { + "status": "affected", + "version": "0", + "versionType": "semver", + "lessThanOrEqual": "0.2.2" + } + ], + "packageName": "konflux-ci", + "collectionURL": "https://github.com/konflux-ci/konflux-ci", + "defaultStatus": "unaffected" + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2026-125637", + "tags": [ + "vdb-entry", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569294", + "name": "RHBZ#2569294", + "tags": [ + "issue-tracking", + "x_refsource_REDHAT" + ] + } + ], + "datePublic": "2026-11-10T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-94", + "description": "Improper Control of Generation of Code", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "x_redhatCweChain": "CWE-94: Improper Control of Generation of Code", + "workarounds": [ + { + "lang": "en", + "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability." + } + ], + "timeline": [ + { + "lang": "en", + "time": "2026-11-10T04:55:44.490Z", + "value": "Reported to Red Hat." + }, + { + "lang": "en", + "time": "2026-11-10T00:00:00.000Z", + "value": "Made public." + } + ], + "credits": [ + { + "lang": "en", + "value": "Red Hat would like to thank abhi04anon - (GitHub) for reporting this issue." + } + ], + "providerMetadata": { + "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "shortName": "redhat", + "dateUpdated": "2026-11-11T22:35:12.202Z" + }, + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125712.json b/data/2026/125xxx/CVE-2026-125712.json index 22ae8f45d0..9b50db0418 100644 --- a/data/2026/125xxx/CVE-2026-125712.json +++ b/data/2026/125xxx/CVE-2026-125712.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-10T10:37:49.396Z", "datePublished": "2026-11-10T11:22:59.567Z", - "dateUpdated": "2026-11-11T18:35:56.566Z" + "dateUpdated": "2026-11-11T22:34:35.277Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/a:redhat:enterprise_linux:8::appstream" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gstreamer1-plugins-base", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.22.12-10.el9_9.1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9::appstream" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -105,16 +123,6 @@ "cpes": [ "cpe:/o:redhat:rhel_els:7" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 9", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "gstreamer1-plugins-base", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:9" - ] } ], "references": [ @@ -126,6 +134,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99126", + "name": "RHSA-2026:99126", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-125712", "tags": [ @@ -180,7 +196,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T18:35:56.566Z" + "dateUpdated": "2026-11-11T22:34:35.277Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/126xxx/CVE-2026-126757.json b/data/2026/126xxx/CVE-2026-126757.json new file mode 100644 index 0000000000..1f5aa831b9 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126757.json @@ -0,0 +1,170 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126757", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-11T16:58:28.007Z", + "datePublished": "2026-11-11T22:45:40.168Z", + "dateUpdated": "2026-11-11T22:45:40.168Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-11T22:45:40.168Z" + }, + "title": "Moonshot AI Kimi Code Web UI index-HU0LCM-X.js isOriginAllowed redirect", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-601", + "lang": "en", + "description": "Open Redirect" + } + ] + } + ], + "affected": [ + { + "vendor": "Moonshot AI", + "product": "Kimi Code", + "versions": [ + { + "version": "2.5.0", + "status": "affected" + }, + { + "version": "2.5.1", + "status": "affected" + }, + { + "version": "2.5.2", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*" + ], + "modules": [ + "Web UI" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in Moonshot AI Kimi Code up to 2.5.2. This affects the function isOriginAllowed of the file apps/kimi-code/dist-web/assets/index-HU0LCM-X.js of the component Web UI. Such manipulation of the argument kimi_origin leads to open redirect. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 4.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 4.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 5, + "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-11T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-11T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-11T18:03:39.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "ShiyuFan_BinYuan (VulDB User)", + "type": "reporter" + }, + { + "lang": "en", + "value": "VulDB CNA Team", + "type": "coordinator" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/435867", + "name": "VDB-435867 | Moonshot AI Kimi Code Web UI index-HU0LCM-X.js isOriginAllowed redirect", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/435867/cti", + "name": "VDB-435867 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-126757", + "name": "CVE-2026-126757 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1033259", + "name": "Submit #1033259 | 北京月之暗面科技股份有限公司 kimi code 0.42.0 Kimi Code 默认配置RCE 无需开启危险模式", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://mcniyfj5bw9b.feishu.cn/docx/IZ43dY0wzoDtnUxGgy7cQ6xcnFh", + "tags": [ + "exploit" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126758.json b/data/2026/126xxx/CVE-2026-126758.json new file mode 100644 index 0000000000..417986316d --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126758.json @@ -0,0 +1,185 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126758", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-11T16:58:32.820Z", + "datePublished": "2026-11-11T23:00:47.831Z", + "dateUpdated": "2026-11-11T23:00:47.831Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-11T23:00:47.831Z" + }, + "title": "Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-807", + "lang": "en", + "description": "Reliance on Untrusted Inputs in a Security Decision" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-20", + "lang": "en", + "description": "Improper Input Validation" + } + ] + } + ], + "affected": [ + { + "vendor": "Moonshot AI", + "product": "Kimi Code", + "versions": [ + { + "version": "2.0.0", + "status": "affected" + }, + { + "version": "2.0.1", + "status": "affected" + }, + { + "version": "2.0.2", + "status": "affected" + }, + { + "version": "2.1.0", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*" + ], + "modules": [ + "WorkspaceDirsService" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.1.0 is able to resolve this issue. Upgrading the affected component is recommended." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.8, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 4.4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 4.4, + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 3.2, + "vectorString": "AV:L/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:OF/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-11T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-11T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-11T18:03:43.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "ShiyuFan_BinYuan (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/435868", + "name": "VDB-435868 | Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/435868/cti", + "name": "VDB-435868 | CTI Indicators (IOB, IOC, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-126758", + "name": "CVE-2026-126758 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1033260", + "name": "Submit #1033260 | 北京月之暗面科技股份有限公司 kimi code 0.42.0 Kimi Code 审批绕过", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://mcniyfj5bw9b.feishu.cn/docx/LsJldjpjXomkb4xTJ6CcWzdFnvd", + "tags": [ + "exploit" + ] + }, + { + "url": "https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%402.1.0", + "tags": [ + "patch" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126759.json b/data/2026/126xxx/CVE-2026-126759.json new file mode 100644 index 0000000000..a4f7e38309 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126759.json @@ -0,0 +1,165 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126759", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-11T17:01:35.277Z", + "datePublished": "2026-11-11T23:15:22.210Z", + "dateUpdated": "2026-11-11T23:15:22.210Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-11T23:15:22.210Z" + }, + "title": "H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-306", + "lang": "en", + "description": "Missing Authentication" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-287", + "lang": "en", + "description": "Improper Authentication" + } + ] + } + ], + "affected": [ + { + "vendor": "H3C", + "product": "ICG2000 Unified Communication Gateway", + "versions": [ + { + "version": "2023", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:h:h3c:icg2000_unified_communication_gateway:*:*:*:*:*:*:*:*" + ], + "modules": [ + "Web Management Module" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 5.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR" + } + } + ], + "timeline": [ + { + "time": "2026-11-11T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-11T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-11T18:06:40.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "bruce_xiaowei (VulDB User)", + "type": "reporter" + }, + { + "lang": "en", + "value": "VulDB CNA Team", + "type": "coordinator" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/435869", + "name": "VDB-435869 | H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication", + "tags": [ + "vdb-entry" + ] + }, + { + "url": "https://vuldb.com/vuln/435869/cti", + "name": "VDB-435869 | CTI Indicators (IOB, IOC, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-126759", + "name": "CVE-2026-126759 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1035822", + "name": "Submit #1035822 | H3C (New H3C Technologies Co., Ltd.) `ICG2000 Unified Communication Gateway (ICG 2000 Information Communication Gateway), web management module ICG2000, firmware generation 2023 (device self-reports cyear=2023; exact Comware release not yet determined) Au", + "tags": [ + "third-party-advisory" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126840.json b/data/2026/126xxx/CVE-2026-126840.json new file mode 100644 index 0000000000..b891ad74a9 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126840.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126840", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:48.449Z", + "datePublished": "2026-11-11T22:39:02.034Z", + "dateUpdated": "2026-11-11T22:39:02.034Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds write", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:02.034Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578664961" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126841.json b/data/2026/126xxx/CVE-2026-126841.json new file mode 100644 index 0000000000..2553c445da --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126841.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126841", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:50.164Z", + "datePublished": "2026-11-11T22:39:05.128Z", + "dateUpdated": "2026-11-11T22:39:05.128Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:05.128Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580865537" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126842.json b/data/2026/126xxx/CVE-2026-126842.json new file mode 100644 index 0000000000..710abc25f1 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126842.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126842", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:51.771Z", + "datePublished": "2026-11-11T22:38:52.967Z", + "dateUpdated": "2026-11-11T22:38:52.967Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.967Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574209539" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126843.json b/data/2026/126xxx/CVE-2026-126843.json new file mode 100644 index 0000000000..1099465867 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126843.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126843", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:53.818Z", + "datePublished": "2026-11-11T22:39:00.467Z", + "dateUpdated": "2026-11-11T22:39:00.467Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:00.467Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578322433" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126844.json b/data/2026/126xxx/CVE-2026-126844.json new file mode 100644 index 0000000000..dc76dc17cc --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126844.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126844", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:55.318Z", + "datePublished": "2026-11-11T22:38:57.088Z", + "dateUpdated": "2026-11-11T22:38:57.088Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:57.088Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576944655" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126845.json b/data/2026/126xxx/CVE-2026-126845.json new file mode 100644 index 0000000000..a3537895cc --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126845.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126845", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:57.527Z", + "datePublished": "2026-11-11T22:38:54.636Z", + "dateUpdated": "2026-11-11T22:38:54.636Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:54.636Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574795295" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126846.json b/data/2026/126xxx/CVE-2026-126846.json new file mode 100644 index 0000000000..4c25a0dfed --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126846.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126846", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:07:58.867Z", + "datePublished": "2026-11-11T22:38:49.580Z", + "dateUpdated": "2026-11-11T22:38:49.580Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:49.580Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580857377" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126847.json b/data/2026/126xxx/CVE-2026-126847.json new file mode 100644 index 0000000000..fc116d2bac --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126847.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126847", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:02.103Z", + "datePublished": "2026-11-11T22:38:51.851Z", + "dateUpdated": "2026-11-11T22:38:51.851Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:51.851Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/572988453" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126848.json b/data/2026/126xxx/CVE-2026-126848.json new file mode 100644 index 0000000000..314f727071 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126848.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126848", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:03.608Z", + "datePublished": "2026-11-11T22:39:02.390Z", + "dateUpdated": "2026-11-11T22:39:02.390Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:02.390Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578685477" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126849.json b/data/2026/126xxx/CVE-2026-126849.json new file mode 100644 index 0000000000..a0c4da8ae7 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126849.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126849", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:06.301Z", + "datePublished": "2026-11-11T22:39:04.418Z", + "dateUpdated": "2026-11-11T22:39:04.418Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.418Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579313193" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126850.json b/data/2026/126xxx/CVE-2026-126850.json new file mode 100644 index 0000000000..6f474aab4d --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126850.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126850", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:08.016Z", + "datePublished": "2026-11-11T22:39:04.951Z", + "dateUpdated": "2026-11-11T22:39:04.951Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.951Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580853808" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126851.json b/data/2026/126xxx/CVE-2026-126851.json new file mode 100644 index 0000000000..a67a3bfe97 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126851.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126851", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:09.387Z", + "datePublished": "2026-11-11T22:38:54.463Z", + "dateUpdated": "2026-11-11T22:38:54.463Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:54.463Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574792758" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126852.json b/data/2026/126xxx/CVE-2026-126852.json new file mode 100644 index 0000000000..5c7daa9d3f --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126852.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126852", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:11.726Z", + "datePublished": "2026-11-11T22:39:04.769Z", + "dateUpdated": "2026-11-11T22:39:04.769Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.769Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580846651" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126853.json b/data/2026/126xxx/CVE-2026-126853.json new file mode 100644 index 0000000000..525a21b210 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126853.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126853", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:13.890Z", + "datePublished": "2026-11-11T22:38:52.045Z", + "dateUpdated": "2026-11-11T22:38:52.045Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.045Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/573263421" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126854.json b/data/2026/126xxx/CVE-2026-126854.json new file mode 100644 index 0000000000..3fd6b78523 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126854.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126854", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:16.441Z", + "datePublished": "2026-11-11T22:39:00.666Z", + "dateUpdated": "2026-11-11T22:39:00.666Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:00.666Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578655807" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126855.json b/data/2026/126xxx/CVE-2026-126855.json new file mode 100644 index 0000000000..d18d6bf4e5 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126855.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126855", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:20.104Z", + "datePublished": "2026-11-11T22:39:04.046Z", + "dateUpdated": "2026-11-11T22:39:04.046Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Missing authorization", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.046Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579300424" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126856.json b/data/2026/126xxx/CVE-2026-126856.json new file mode 100644 index 0000000000..92c470b6aa --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126856.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126856", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:23.429Z", + "datePublished": "2026-11-11T22:38:58.741Z", + "dateUpdated": "2026-11-11T22:38:58.741Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incomplete cleanup", + "cweId": "CWE-459" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:58.741Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577260644" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126857.json b/data/2026/126xxx/CVE-2026-126857.json new file mode 100644 index 0000000000..f7d04fb557 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126857.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126857", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:25.097Z", + "datePublished": "2026-11-11T22:39:01.261Z", + "dateUpdated": "2026-11-11T22:39:01.261Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:01.261Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578656869" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126858.json b/data/2026/126xxx/CVE-2026-126858.json new file mode 100644 index 0000000000..f0cada2791 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126858.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126858", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:26.820Z", + "datePublished": "2026-11-11T22:38:55.899Z", + "dateUpdated": "2026-11-11T22:38:55.899Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:55.899Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575937643" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126859.json b/data/2026/126xxx/CVE-2026-126859.json new file mode 100644 index 0000000000..4710d3cade --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126859.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126859", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:28.574Z", + "datePublished": "2026-11-11T22:38:50.329Z", + "dateUpdated": "2026-11-11T22:38:50.329Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Link following", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:50.329Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/563340397" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126860.json b/data/2026/126xxx/CVE-2026-126860.json new file mode 100644 index 0000000000..1745d6870f --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126860.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126860", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:34.791Z", + "datePublished": "2026-11-11T22:39:06.337Z", + "dateUpdated": "2026-11-11T22:39:06.337Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:06.337Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/581785712" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126861.json b/data/2026/126xxx/CVE-2026-126861.json new file mode 100644 index 0000000000..8d51c52459 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126861.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126861", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:38.372Z", + "datePublished": "2026-11-11T22:38:58.357Z", + "dateUpdated": "2026-11-11T22:38:58.357Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:58.357Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577171064" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126862.json b/data/2026/126xxx/CVE-2026-126862.json new file mode 100644 index 0000000000..36c97a3733 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126862.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126862", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:39.762Z", + "datePublished": "2026-11-11T22:38:53.724Z", + "dateUpdated": "2026-11-11T22:38:53.724Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Improper input validation", + "cweId": "CWE-20" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:53.724Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574381704" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126863.json b/data/2026/126xxx/CVE-2026-126863.json new file mode 100644 index 0000000000..0e5cf6e458 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126863.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126863", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:41.169Z", + "datePublished": "2026-11-11T22:38:55.206Z", + "dateUpdated": "2026-11-11T22:38:55.206Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:55.206Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575312521" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126864.json b/data/2026/126xxx/CVE-2026-126864.json new file mode 100644 index 0000000000..df4e8fa564 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126864.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126864", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:44.870Z", + "datePublished": "2026-11-11T22:38:49.953Z", + "dateUpdated": "2026-11-11T22:38:49.953Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:49.953Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/567827593" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126865.json b/data/2026/126xxx/CVE-2026-126865.json new file mode 100644 index 0000000000..bf9659f736 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126865.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126865", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:49.021Z", + "datePublished": "2026-11-11T22:38:52.219Z", + "dateUpdated": "2026-11-11T22:38:52.219Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.219Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/573335176" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126866.json b/data/2026/126xxx/CVE-2026-126866.json new file mode 100644 index 0000000000..72765691a1 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126866.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126866", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:55.144Z", + "datePublished": "2026-11-11T22:38:56.839Z", + "dateUpdated": "2026-11-11T22:38:56.839Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:56.839Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576943246" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126867.json b/data/2026/126xxx/CVE-2026-126867.json new file mode 100644 index 0000000000..ac6450b0e5 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126867.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126867", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:57.711Z", + "datePublished": "2026-11-11T22:38:55.032Z", + "dateUpdated": "2026-11-11T22:38:55.032Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:55.032Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575086736" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126868.json b/data/2026/126xxx/CVE-2026-126868.json new file mode 100644 index 0000000000..6eb0468ea1 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126868.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126868", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:08:59.773Z", + "datePublished": "2026-11-11T22:39:05.596Z", + "dateUpdated": "2026-11-11T22:39:05.596Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:05.596Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580867734" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126869.json b/data/2026/126xxx/CVE-2026-126869.json new file mode 100644 index 0000000000..a881dfb6bc --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126869.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126869", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:03.499Z", + "datePublished": "2026-11-11T22:38:55.593Z", + "dateUpdated": "2026-11-11T22:38:55.593Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:55.593Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575533210" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126870.json b/data/2026/126xxx/CVE-2026-126870.json new file mode 100644 index 0000000000..e4bd55a311 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126870.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126870", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:05.241Z", + "datePublished": "2026-11-11T22:38:50.952Z", + "dateUpdated": "2026-11-11T22:38:50.952Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:50.952Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/568906910" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126871.json b/data/2026/126xxx/CVE-2026-126871.json new file mode 100644 index 0000000000..53aa222ddb --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126871.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126871", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:07.618Z", + "datePublished": "2026-11-11T22:38:53.354Z", + "dateUpdated": "2026-11-11T22:38:53.354Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:53.354Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574218401" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126872.json b/data/2026/126xxx/CVE-2026-126872.json new file mode 100644 index 0000000000..98d69ce2a3 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126872.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126872", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:13.347Z", + "datePublished": "2026-11-11T22:38:59.905Z", + "dateUpdated": "2026-11-11T22:38:59.905Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:59.905Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577376424" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126873.json b/data/2026/126xxx/CVE-2026-126873.json new file mode 100644 index 0000000000..ace42b4b0f --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126873.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126873", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:14.916Z", + "datePublished": "2026-11-11T22:38:59.165Z", + "dateUpdated": "2026-11-11T22:38:59.165Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:59.165Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577336494" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126874.json b/data/2026/126xxx/CVE-2026-126874.json new file mode 100644 index 0000000000..3332cd3242 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126874.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126874", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:19.769Z", + "datePublished": "2026-11-11T22:38:56.268Z", + "dateUpdated": "2026-11-11T22:38:56.268Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:56.268Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576439987" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126875.json b/data/2026/126xxx/CVE-2026-126875.json new file mode 100644 index 0000000000..e52f582e62 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126875.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126875", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:21.159Z", + "datePublished": "2026-11-11T22:38:53.539Z", + "dateUpdated": "2026-11-11T22:38:53.539Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Missing authorization", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:53.539Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574222006" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126876.json b/data/2026/126xxx/CVE-2026-126876.json new file mode 100644 index 0000000000..a2155f666c --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126876.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126876", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:22.365Z", + "datePublished": "2026-11-11T22:38:56.452Z", + "dateUpdated": "2026-11-11T22:38:56.452Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Integer overflow", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:56.452Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576664769" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126877.json b/data/2026/126xxx/CVE-2026-126877.json new file mode 100644 index 0000000000..757e4367df --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126877.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126877", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:23.937Z", + "datePublished": "2026-11-11T22:39:00.090Z", + "dateUpdated": "2026-11-11T22:39:00.090Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:00.090Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577377985" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126878.json b/data/2026/126xxx/CVE-2026-126878.json new file mode 100644 index 0000000000..917ebaaa92 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126878.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126878", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:35.182Z", + "datePublished": "2026-11-11T22:38:51.487Z", + "dateUpdated": "2026-11-11T22:38:51.487Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information leak", + "cweId": "CWE-200" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:51.487Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/572312779" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126879.json b/data/2026/126xxx/CVE-2026-126879.json new file mode 100644 index 0000000000..1b7ebd5b4c --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126879.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126879", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:38.878Z", + "datePublished": "2026-11-11T22:38:49.336Z", + "dateUpdated": "2026-11-11T22:38:49.336Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:49.336Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576736463" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126880.json b/data/2026/126xxx/CVE-2026-126880.json new file mode 100644 index 0000000000..8dc2fce340 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126880.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126880", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:44.649Z", + "datePublished": "2026-11-11T22:38:59.706Z", + "dateUpdated": "2026-11-11T22:38:59.706Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:59.706Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577366752" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126881.json b/data/2026/126xxx/CVE-2026-126881.json new file mode 100644 index 0000000000..47963fd6ee --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126881.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126881", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:46.449Z", + "datePublished": "2026-11-11T22:38:54.833Z", + "dateUpdated": "2026-11-11T22:38:54.833Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Improper initialization", + "cweId": "CWE-665" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:54.833Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575038730" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126882.json b/data/2026/126xxx/CVE-2026-126882.json new file mode 100644 index 0000000000..e388a31fa4 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126882.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126882", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:47.798Z", + "datePublished": "2026-11-11T22:39:02.751Z", + "dateUpdated": "2026-11-11T22:39:02.751Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information leak", + "cweId": "CWE-200" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:02.751Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578685706" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126883.json b/data/2026/126xxx/CVE-2026-126883.json new file mode 100644 index 0000000000..f567e8595c --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126883.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126883", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:49.532Z", + "datePublished": "2026-11-11T22:39:01.657Z", + "dateUpdated": "2026-11-11T22:39:01.657Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:01.657Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578659604" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126884.json b/data/2026/126xxx/CVE-2026-126884.json new file mode 100644 index 0000000000..a763e25aad --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126884.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126884", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:51.172Z", + "datePublished": "2026-11-11T22:38:57.990Z", + "dateUpdated": "2026-11-11T22:38:57.990Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:57.990Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576949530" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126885.json b/data/2026/126xxx/CVE-2026-126885.json new file mode 100644 index 0000000000..2fb49ccb5b --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126885.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126885", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:54.442Z", + "datePublished": "2026-11-11T22:38:48.798Z", + "dateUpdated": "2026-11-11T22:38:48.798Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:48.798Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/568699166" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126886.json b/data/2026/126xxx/CVE-2026-126886.json new file mode 100644 index 0000000000..cc977f5ae5 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126886.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126886", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:09:57.497Z", + "datePublished": "2026-11-11T22:38:50.583Z", + "dateUpdated": "2026-11-11T22:38:50.583Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:50.583Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/567611696" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126887.json b/data/2026/126xxx/CVE-2026-126887.json new file mode 100644 index 0000000000..b83f153efd --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126887.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126887", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:00.700Z", + "datePublished": "2026-11-11T22:38:50.760Z", + "dateUpdated": "2026-11-11T22:38:50.760Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:50.760Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/567611698" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126888.json b/data/2026/126xxx/CVE-2026-126888.json new file mode 100644 index 0000000000..68fdaaa901 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126888.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126888", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:07.079Z", + "datePublished": "2026-11-11T22:39:00.276Z", + "dateUpdated": "2026-11-11T22:39:00.276Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Buffer overflow", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:00.276Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577461556" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126889.json b/data/2026/126xxx/CVE-2026-126889.json new file mode 100644 index 0000000000..2b36bcc073 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126889.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126889", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:09.068Z", + "datePublished": "2026-11-11T22:38:50.139Z", + "dateUpdated": "2026-11-11T22:38:50.139Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Off-by-one error", + "cweId": "CWE-193" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:50.139Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/560620348" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126890.json b/data/2026/126xxx/CVE-2026-126890.json new file mode 100644 index 0000000000..4bf56653ec --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126890.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126890", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:12.823Z", + "datePublished": "2026-11-11T22:39:06.160Z", + "dateUpdated": "2026-11-11T22:39:06.160Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:06.160Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/581629247" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126891.json b/data/2026/126xxx/CVE-2026-126891.json new file mode 100644 index 0000000000..9f8a613dbb --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126891.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126891", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:16.636Z", + "datePublished": "2026-11-11T22:38:56.095Z", + "dateUpdated": "2026-11-11T22:38:56.095Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:56.095Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575939904" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126892.json b/data/2026/126xxx/CVE-2026-126892.json new file mode 100644 index 0000000000..0578a8c725 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126892.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126892", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:18.158Z", + "datePublished": "2026-11-11T22:39:00.870Z", + "dateUpdated": "2026-11-11T22:39:00.870Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:00.870Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578656065" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126893.json b/data/2026/126xxx/CVE-2026-126893.json new file mode 100644 index 0000000000..55e3836ae5 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126893.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126893", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:20.235Z", + "datePublished": "2026-11-11T22:39:03.817Z", + "dateUpdated": "2026-11-11T22:39:03.817Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds write", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:03.817Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579278668" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126894.json b/data/2026/126xxx/CVE-2026-126894.json new file mode 100644 index 0000000000..cff869b395 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126894.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126894", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:22.388Z", + "datePublished": "2026-11-11T22:38:58.184Z", + "dateUpdated": "2026-11-11T22:38:58.184Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:58.184Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576950618" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126895.json b/data/2026/126xxx/CVE-2026-126895.json new file mode 100644 index 0000000000..9706ba60bb --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126895.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126895", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:25.923Z", + "datePublished": "2026-11-11T22:38:49.140Z", + "dateUpdated": "2026-11-11T22:38:49.140Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:49.140Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575524700" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126896.json b/data/2026/126xxx/CVE-2026-126896.json new file mode 100644 index 0000000000..d261e1a50c --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126896.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126896", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:29.259Z", + "datePublished": "2026-11-11T22:38:55.392Z", + "dateUpdated": "2026-11-11T22:38:55.392Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Missing authorization", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:55.392Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/575524702" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126897.json b/data/2026/126xxx/CVE-2026-126897.json new file mode 100644 index 0000000000..fd3a947f24 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126897.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126897", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:31.240Z", + "datePublished": "2026-11-11T22:39:01.070Z", + "dateUpdated": "2026-11-11T22:39:01.070Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:01.070Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578656106" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126898.json b/data/2026/126xxx/CVE-2026-126898.json new file mode 100644 index 0000000000..aaeffd9f08 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126898.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126898", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:33.234Z", + "datePublished": "2026-11-11T22:38:53.164Z", + "dateUpdated": "2026-11-11T22:38:53.164Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:53.164Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574216555" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126899.json b/data/2026/126xxx/CVE-2026-126899.json new file mode 100644 index 0000000000..8ad007ee78 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126899.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126899", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:36.078Z", + "datePublished": "2026-11-11T22:39:06.906Z", + "dateUpdated": "2026-11-11T22:39:06.906Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:06.906Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/583122799" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126900.json b/data/2026/126xxx/CVE-2026-126900.json new file mode 100644 index 0000000000..6c9f1f953c --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126900.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126900", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:37.773Z", + "datePublished": "2026-11-11T22:38:53.907Z", + "dateUpdated": "2026-11-11T22:38:53.907Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:53.907Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574409610" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126901.json b/data/2026/126xxx/CVE-2026-126901.json new file mode 100644 index 0000000000..c66e629139 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126901.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126901", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:41.209Z", + "datePublished": "2026-11-11T22:39:04.596Z", + "dateUpdated": "2026-11-11T22:39:04.596Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.596Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579818899" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126902.json b/data/2026/126xxx/CVE-2026-126902.json new file mode 100644 index 0000000000..1627b09d89 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126902.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126902", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:44.361Z", + "datePublished": "2026-11-11T22:39:05.414Z", + "dateUpdated": "2026-11-11T22:39:05.414Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect reference resolution", + "cweId": "CWE-706" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:05.414Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580867480" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126903.json b/data/2026/126xxx/CVE-2026-126903.json new file mode 100644 index 0000000000..f1978c4e97 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126903.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126903", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:47.870Z", + "datePublished": "2026-11-11T22:38:52.584Z", + "dateUpdated": "2026-11-11T22:38:52.584Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Improper state validation", + "cweId": "CWE-754" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.584Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574035865" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126904.json b/data/2026/126xxx/CVE-2026-126904.json new file mode 100644 index 0000000000..b50a32b563 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126904.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126904", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:49.218Z", + "datePublished": "2026-11-11T22:38:54.096Z", + "dateUpdated": "2026-11-11T22:38:54.096Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:54.096Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574410140" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126905.json b/data/2026/126xxx/CVE-2026-126905.json new file mode 100644 index 0000000000..50d950de37 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126905.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126905", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:51.618Z", + "datePublished": "2026-11-11T22:38:58.975Z", + "dateUpdated": "2026-11-11T22:38:58.975Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incomplete cleanup", + "cweId": "CWE-459" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:58.975Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577305517" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126906.json b/data/2026/126xxx/CVE-2026-126906.json new file mode 100644 index 0000000000..49865478a6 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126906.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126906", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:53.113Z", + "datePublished": "2026-11-11T22:39:03.140Z", + "dateUpdated": "2026-11-11T22:39:03.140Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Race condition", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:03.140Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/578693038" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126907.json b/data/2026/126xxx/CVE-2026-126907.json new file mode 100644 index 0000000000..ffd7692f9b --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126907.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126907", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:55.448Z", + "datePublished": "2026-11-11T22:38:54.279Z", + "dateUpdated": "2026-11-11T22:38:54.279Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:54.279Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574791611" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126908.json b/data/2026/126xxx/CVE-2026-126908.json new file mode 100644 index 0000000000..c6300bfa40 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126908.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126908", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:10:57.634Z", + "datePublished": "2026-11-11T22:39:04.238Z", + "dateUpdated": "2026-11-11T22:39:04.238Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:04.238Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579313083" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126909.json b/data/2026/126xxx/CVE-2026-126909.json new file mode 100644 index 0000000000..fb3440cf0b --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126909.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126909", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:04.161Z", + "datePublished": "2026-11-11T22:38:51.676Z", + "dateUpdated": "2026-11-11T22:38:51.676Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:51.676Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/572501958" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126910.json b/data/2026/126xxx/CVE-2026-126910.json new file mode 100644 index 0000000000..b697b021e0 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126910.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126910", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:08.099Z", + "datePublished": "2026-11-11T22:38:52.770Z", + "dateUpdated": "2026-11-11T22:38:52.770Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.770Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574059463" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126911.json b/data/2026/126xxx/CVE-2026-126911.json new file mode 100644 index 0000000000..2ce4cce2cf --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126911.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126911", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:11.667Z", + "datePublished": "2026-11-11T22:38:49.757Z", + "dateUpdated": "2026-11-11T22:38:49.757Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:49.757Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580921803" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126912.json b/data/2026/126xxx/CVE-2026-126912.json new file mode 100644 index 0000000000..ff205a10e0 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126912.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126912", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:15.617Z", + "datePublished": "2026-11-11T22:38:51.126Z", + "dateUpdated": "2026-11-11T22:38:51.126Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Buffer overflow", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:51.126Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/569286603" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126913.json b/data/2026/126xxx/CVE-2026-126913.json new file mode 100644 index 0000000000..1e2e5e3e88 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126913.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126913", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:18.100Z", + "datePublished": "2026-11-11T22:39:05.958Z", + "dateUpdated": "2026-11-11T22:39:05.958Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:05.958Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580875215" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126914.json b/data/2026/126xxx/CVE-2026-126914.json new file mode 100644 index 0000000000..d5319d68cc --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126914.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126914", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:20.380Z", + "datePublished": "2026-11-11T22:38:59.534Z", + "dateUpdated": "2026-11-11T22:38:59.534Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:59.534Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577346516" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126915.json b/data/2026/126xxx/CVE-2026-126915.json new file mode 100644 index 0000000000..1d05a1949f --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126915.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126915", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:22.132Z", + "datePublished": "2026-11-11T22:39:03.463Z", + "dateUpdated": "2026-11-11T22:39:03.463Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use of uninitialized variable", + "cweId": "CWE-457" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:03.463Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/579276256" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126916.json b/data/2026/126xxx/CVE-2026-126916.json new file mode 100644 index 0000000000..ffc6abc8b7 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126916.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126916", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:26.019Z", + "datePublished": "2026-11-11T22:38:52.403Z", + "dateUpdated": "2026-11-11T22:38:52.403Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Integer overflow", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:52.403Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/574025697" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126917.json b/data/2026/126xxx/CVE-2026-126917.json new file mode 100644 index 0000000000..ee03d701c3 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126917.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126917", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:27.749Z", + "datePublished": "2026-11-11T22:38:58.563Z", + "dateUpdated": "2026-11-11T22:38:58.563Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory corruption in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Memory corruption", + "cweId": "CWE-119" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:58.563Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577242082" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126918.json b/data/2026/126xxx/CVE-2026-126918.json new file mode 100644 index 0000000000..903dad142e --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126918.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126918", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:31.020Z", + "datePublished": "2026-11-11T22:38:56.649Z", + "dateUpdated": "2026-11-11T22:38:56.649Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:56.649Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/576855527" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126919.json b/data/2026/126xxx/CVE-2026-126919.json new file mode 100644 index 0000000000..a325f7e13b --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126919.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126919", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:34.588Z", + "datePublished": "2026-11-11T22:38:51.305Z", + "dateUpdated": "2026-11-11T22:38:51.305Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:51.305Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/569674220" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126920.json b/data/2026/126xxx/CVE-2026-126920.json new file mode 100644 index 0000000000..ea14ce5a95 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126920.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126920", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:36.691Z", + "datePublished": "2026-11-11T22:39:06.670Z", + "dateUpdated": "2026-11-11T22:39:06.670Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information leak", + "cweId": "CWE-200" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:06.670Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/581903854" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126921.json b/data/2026/126xxx/CVE-2026-126921.json new file mode 100644 index 0000000000..f4cd32cf2d --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126921.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126921", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:39.141Z", + "datePublished": "2026-11-11T22:39:05.767Z", + "dateUpdated": "2026-11-11T22:39:05.767Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:39:05.767Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/580869107" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126922.json b/data/2026/126xxx/CVE-2026-126922.json new file mode 100644 index 0000000000..2d6fabef27 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126922.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126922", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-11T22:11:41.059Z", + "datePublished": "2026-11-11T22:38:59.338Z", + "dateUpdated": "2026-11-11T22:38:59.338Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.78", + "status": "affected", + "lessThan": "157.0.8103.78", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds read", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-11T22:38:59.338Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html" + }, + { + "url": "https://issues.chromium.org/issues/577341943" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126932.json b/data/2026/126xxx/CVE-2026-126932.json new file mode 100644 index 0000000000..c6086d7145 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126932.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126932", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-11T22:45:25.171Z", + "datePublished": "2026-11-11T22:53:18.142Z", + "dateUpdated": "2026-11-11T22:53:18.142Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-11T22:53:18.142Z" + }, + "datePublic": "2026-09-27T00:00:00.000Z", + "title": "Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Update", + "descriptions": [ + { + "lang": "en", + "value": "Zipline 4.6.2 before 4.8.0 contains a policy bypass vulnerability that allows authenticated users to evade administrator-disabled MIME types by editing file metadata. Attackers can upload a permitted file, then set a disabled type such as text/html through PATCH /api/user/files/:id so /raw/:id serves that Content-Type." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Unrestricted Upload of File with Dangerous Type", + "cweId": "CWE-434", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "diced", + "product": "zipline", + "defaultStatus": "unaffected", + "packageURL": "pkg:github/diced/zipline", + "versions": [ + { + "version": "4.6.2", + "lessThan": "4.8.0", + "status": "affected", + "versionType": "semver" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/diced/zipline/security/advisories/GHSA-rgxm-54cf-whf7", + "tags": [ + "vendor-advisory" + ], + "name": "GitHub Security Advisory (GHSA-rgxm-54cf-whf7)" + }, + { + "url": "https://github.com/diced/zipline/commit/fc8e886ca841b86a3f677cd7dac1bf9a5bd45b2c", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/diced/zipline/releases/tag/v4.8.0", + "tags": [ + "release-notes" + ], + "name": "zipline v4.8.0 Release Notes" + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/api/user/files/%5Bid%5D/index.ts#L96", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Update", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/zipline-4.6.2-before-4.8.0-disabled-mime-type-policy-bypass-via-file-metadata-update" + } + ], + "credits": [ + { + "lang": "en", + "value": "Sandipkumar sah", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126933.json b/data/2026/126xxx/CVE-2026-126933.json new file mode 100644 index 0000000000..147ae93503 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126933.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126933", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-11T22:45:25.520Z", + "datePublished": "2026-11-11T22:53:18.764Z", + "dateUpdated": "2026-11-11T22:53:18.764Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-11T22:53:18.764Z" + }, + "datePublic": "2026-09-27T00:00:00.000Z", + "title": "Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatch", + "descriptions": [ + { + "lang": "en", + "value": "Zipline 4.0.0 before 4.8.0 contains an upload filter bypass vulnerability that allows users with upload access to store blocked file types due to extension format mismatch. The upload and partial handlers compare dotted, case-sensitive extensions against undotted disabledExtensions entries, letting authenticated or permitted unauthenticated folder uploaders bypass administrator restrictions." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incomplete List of Disallowed Inputs", + "cweId": "CWE-184", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "diced", + "product": "zipline", + "defaultStatus": "unaffected", + "packageURL": "pkg:github/diced/zipline", + "versions": [ + { + "version": "4.0.0", + "lessThan": "4.8.0", + "status": "affected", + "versionType": "semver" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/diced/zipline/security/advisories/GHSA-wwrw-gq56-7wpj", + "tags": [ + "vendor-advisory" + ], + "name": "GitHub Security Advisory (GHSA-wwrw-gq56-7wpj)" + }, + { + "url": "https://github.com/diced/zipline/commit/dbc1fe502130a8ebd95fa04886efec01402e5b5f", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/diced/zipline/releases/tag/v4.8.0", + "tags": [ + "release-notes" + ], + "name": "zipline v4.8.0 Release Notes" + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/api/upload/index.ts#L170", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/api/upload/partial.ts#L294", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatch", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/zipline-4.0.0-before-4.8.0-disabled-extensions-upload-filter-bypass-via-extension-format-mismatch" + } + ], + "credits": [ + { + "lang": "en", + "value": "Sandipkumar sah", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126934.json b/data/2026/126xxx/CVE-2026-126934.json new file mode 100644 index 0000000000..1e994a2f59 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126934.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126934", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-11T22:45:25.863Z", + "datePublished": "2026-11-11T22:53:19.421Z", + "dateUpdated": "2026-11-11T22:53:19.421Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-11T22:53:19.421Z" + }, + "datePublic": "2026-09-27T00:00:00.000Z", + "title": "Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-For", + "descriptions": [ + { + "lang": "en", + "value": "Zipline 4.3.2 before 4.8.0 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade throttling by spoofing X-Forwarded-For headers when core.trustProxy is enabled. Attackers can send a different X-Forwarded-For value per request to obtain fresh rate-limit buckets, enabling unlimited guessing of login passwords, TOTP codes, and file and URL passwords." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use of Less Trusted Source", + "cweId": "CWE-348", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "diced", + "product": "zipline", + "defaultStatus": "unaffected", + "packageURL": "pkg:github/diced/zipline", + "versions": [ + { + "version": "4.3.2", + "lessThan": "4.8.0", + "status": "affected", + "versionType": "semver" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 6.9, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 6.5, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/diced/zipline/security/advisories/GHSA-v938-v8wg-9497", + "tags": [ + "vendor-advisory" + ], + "name": "GitHub Security Advisory (GHSA-v938-v8wg-9497)" + }, + { + "url": "https://github.com/diced/zipline/commit/6bac7e6bb18cb37c1d09f91306c1ffbdca00097c", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/diced/zipline/releases/tag/v4.8.0", + "tags": [ + "release-notes" + ], + "name": "zipline v4.8.0 Release Notes" + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/index.ts#L58-L62", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/startup/plugins.ts#L70-L73", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-For", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/zipline-4.3.2-before-4.8.0-rate-limit-bypass-via-spoofed-x-forwarded-for" + } + ], + "credits": [ + { + "lang": "en", + "value": "Sandipkumar sah", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126935.json b/data/2026/126xxx/CVE-2026-126935.json new file mode 100644 index 0000000000..a31a5a18f6 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126935.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126935", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-11T22:45:26.204Z", + "datePublished": "2026-11-11T22:53:20.141Z", + "dateUpdated": "2026-11-11T22:53:20.141Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-11T22:53:20.141Z" + }, + "datePublic": "2026-09-27T00:00:00.000Z", + "title": "Zipline before 4.8.0 maxViews Limit Bypass via Race Condition", + "descriptions": [ + { + "lang": "en", + "value": "Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/[id].ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing view-limited or delete-on-max-views files beyond their limit." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Time-of-check Time-of-use (TOCTOU) Race Condition", + "cweId": "CWE-367", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "diced", + "product": "zipline", + "defaultStatus": "unaffected", + "packageURL": "pkg:github/diced/zipline", + "versions": [ + { + "version": "0", + "lessThan": "4.8.0", + "status": "affected", + "versionType": "semver" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 6.3, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseScore": 3.7, + "baseSeverity": "LOW" + } + } + ], + "references": [ + { + "url": "https://github.com/diced/zipline/security/advisories/GHSA-7xv9-wr46-j578", + "tags": [ + "vendor-advisory" + ], + "name": "GitHub Security Advisory (GHSA-7xv9-wr46-j578)" + }, + { + "url": "https://github.com/diced/zipline/commit/1770479d6795ea8700f0ce6ba08a1654d3644c73", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/diced/zipline/releases/tag/v4.8.0", + "tags": [ + "release-notes" + ], + "name": "zipline v4.8.0 Release Notes" + }, + { + "url": "https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/raw/%5Bid%5D.ts#L101-L133", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Zipline before 4.8.0 maxViews Limit Bypass via Race Condition", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/zipline-before-4.8.0-maxviews-limit-bypass-via-race-condition" + } + ], + "credits": [ + { + "lang": "en", + "value": "Sandipkumar sah", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/43xxx/CVE-2026-43961.json b/data/2026/43xxx/CVE-2026-43961.json index 34274b251f..0f007909f5 100644 --- a/data/2026/43xxx/CVE-2026-43961.json +++ b/data/2026/43xxx/CVE-2026-43961.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-05-04T18:07:21.843Z", "datePublished": "2026-08-19T14:06:09.120Z", - "dateUpdated": "2026-11-11T05:55:43.046Z" + "dateUpdated": "2026-11-11T22:35:02.468Z" }, "containers": { "cna": { @@ -62,6 +62,24 @@ ], "defaultStatus": "unaffected" }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "vim", + "defaultStatus": "affected", + "versions": [ + { + "version": "2:9.1.083-26.el10_2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", @@ -216,6 +234,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99165", + "name": "RHSA-2026:99165", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-43961", "tags": [ @@ -276,7 +302,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T05:55:43.046Z" + "dateUpdated": "2026-11-11T22:35:02.468Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/delta.json b/data/delta.json index 5124e5e1c4..2f0a6c735f 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,18 +1,12 @@ { - "fetchTime": "2026-11-11T22:19:25.240Z", - "numberOfChanges": 2, + "fetchTime": "2026-11-11T23:18:11.669Z", + "numberOfChanges": 1, "new": [ { - "cveId": "CVE-2026-107922", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107922", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107922.json", - "dateUpdated": "2026-11-11T22:18:59.410Z" - }, - { - "cveId": "CVE-2026-68549", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68549", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68549.json", - "dateUpdated": "2026-11-11T22:14:50.340Z" + "cveId": "CVE-2026-126759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126759.json", + "dateUpdated": "2026-11-11T23:15:22.210Z" } ], "updated": [], diff --git a/data/deltaLog.json b/data/deltaLog.json index 73406a776e..56d5dc29d0 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,630 @@ [ + { + "fetchTime": "2026-11-11T23:18:11.669Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-126759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126759.json", + "dateUpdated": "2026-11-11T23:15:22.210Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-11T23:01:03.780Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-126758", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126758", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126758.json", + "dateUpdated": "2026-11-11T23:00:47.831Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-11T22:55:23.702Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-126932", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126932", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126932.json", + "dateUpdated": "2026-11-11T22:53:18.142Z" + }, + { + "cveId": "CVE-2026-126933", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126933", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126933.json", + "dateUpdated": "2026-11-11T22:53:18.764Z" + }, + { + "cveId": "CVE-2026-126934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126934.json", + "dateUpdated": "2026-11-11T22:53:19.421Z" + }, + { + "cveId": "CVE-2026-126935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126935.json", + "dateUpdated": "2026-11-11T22:53:20.141Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-11395", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-11395", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/11xxx/CVE-2025-11395.json", + "dateUpdated": "2026-11-11T22:54:47.290Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T22:49:24.934Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-126757", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126757", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126757.json", + "dateUpdated": "2026-11-11T22:45:40.168Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-11T22:43:37.107Z", + "numberOfChanges": 83, + "new": [ + { + "cveId": "CVE-2026-126840", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126840", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126840.json", + "dateUpdated": "2026-11-11T22:39:02.034Z" + }, + { + "cveId": "CVE-2026-126841", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126841", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126841.json", + "dateUpdated": "2026-11-11T22:39:05.128Z" + }, + { + "cveId": "CVE-2026-126842", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126842", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126842.json", + "dateUpdated": "2026-11-11T22:38:52.967Z" + }, + { + "cveId": "CVE-2026-126843", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126843", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126843.json", + "dateUpdated": "2026-11-11T22:39:00.467Z" + }, + { + "cveId": "CVE-2026-126844", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126844", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126844.json", + "dateUpdated": "2026-11-11T22:38:57.088Z" + }, + { + "cveId": "CVE-2026-126845", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126845", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126845.json", + "dateUpdated": "2026-11-11T22:38:54.636Z" + }, + { + "cveId": "CVE-2026-126846", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126846", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126846.json", + "dateUpdated": "2026-11-11T22:38:49.580Z" + }, + { + "cveId": "CVE-2026-126847", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126847", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126847.json", + "dateUpdated": "2026-11-11T22:38:51.851Z" + }, + { + "cveId": "CVE-2026-126848", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126848", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126848.json", + "dateUpdated": "2026-11-11T22:39:02.390Z" + }, + { + "cveId": "CVE-2026-126849", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126849", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126849.json", + "dateUpdated": "2026-11-11T22:39:04.418Z" + }, + { + "cveId": "CVE-2026-126850", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126850", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126850.json", + "dateUpdated": "2026-11-11T22:39:04.951Z" + }, + { + "cveId": "CVE-2026-126851", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126851", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126851.json", + "dateUpdated": "2026-11-11T22:38:54.463Z" + }, + { + "cveId": "CVE-2026-126852", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126852", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126852.json", + "dateUpdated": "2026-11-11T22:39:04.769Z" + }, + { + "cveId": "CVE-2026-126853", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126853", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126853.json", + "dateUpdated": "2026-11-11T22:38:52.045Z" + }, + { + "cveId": "CVE-2026-126854", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126854", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126854.json", + "dateUpdated": "2026-11-11T22:39:00.666Z" + }, + { + "cveId": "CVE-2026-126855", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126855", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126855.json", + "dateUpdated": "2026-11-11T22:39:04.046Z" + }, + { + "cveId": "CVE-2026-126856", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126856", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126856.json", + "dateUpdated": "2026-11-11T22:38:58.741Z" + }, + { + "cveId": "CVE-2026-126857", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126857", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126857.json", + "dateUpdated": "2026-11-11T22:39:01.261Z" + }, + { + "cveId": "CVE-2026-126858", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126858", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126858.json", + "dateUpdated": "2026-11-11T22:38:55.899Z" + }, + { + "cveId": "CVE-2026-126859", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126859", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126859.json", + "dateUpdated": "2026-11-11T22:38:50.329Z" + }, + { + "cveId": "CVE-2026-126860", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126860", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126860.json", + "dateUpdated": "2026-11-11T22:39:06.337Z" + }, + { + "cveId": "CVE-2026-126861", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126861", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126861.json", + "dateUpdated": "2026-11-11T22:38:58.357Z" + }, + { + "cveId": "CVE-2026-126862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126862.json", + "dateUpdated": "2026-11-11T22:38:53.724Z" + }, + { + "cveId": "CVE-2026-126863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126863.json", + "dateUpdated": "2026-11-11T22:38:55.206Z" + }, + { + "cveId": "CVE-2026-126864", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126864", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126864.json", + "dateUpdated": "2026-11-11T22:38:49.953Z" + }, + { + "cveId": "CVE-2026-126865", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126865", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126865.json", + "dateUpdated": "2026-11-11T22:38:52.219Z" + }, + { + "cveId": "CVE-2026-126866", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126866", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126866.json", + "dateUpdated": "2026-11-11T22:38:56.839Z" + }, + { + "cveId": "CVE-2026-126867", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126867", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126867.json", + "dateUpdated": "2026-11-11T22:38:55.032Z" + }, + { + "cveId": "CVE-2026-126868", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126868", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126868.json", + "dateUpdated": "2026-11-11T22:39:05.596Z" + }, + { + "cveId": "CVE-2026-126869", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126869", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126869.json", + "dateUpdated": "2026-11-11T22:38:55.593Z" + }, + { + "cveId": "CVE-2026-126870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126870.json", + "dateUpdated": "2026-11-11T22:38:50.952Z" + }, + { + "cveId": "CVE-2026-126871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126871.json", + "dateUpdated": "2026-11-11T22:38:53.354Z" + }, + { + "cveId": "CVE-2026-126872", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126872", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126872.json", + "dateUpdated": "2026-11-11T22:38:59.905Z" + }, + { + "cveId": "CVE-2026-126873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126873.json", + "dateUpdated": "2026-11-11T22:38:59.165Z" + }, + { + "cveId": "CVE-2026-126874", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126874", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126874.json", + "dateUpdated": "2026-11-11T22:38:56.268Z" + }, + { + "cveId": "CVE-2026-126875", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126875", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126875.json", + "dateUpdated": "2026-11-11T22:38:53.539Z" + }, + { + "cveId": "CVE-2026-126876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126876.json", + "dateUpdated": "2026-11-11T22:38:56.452Z" + }, + { + "cveId": "CVE-2026-126877", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126877", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126877.json", + "dateUpdated": "2026-11-11T22:39:00.090Z" + }, + { + "cveId": "CVE-2026-126878", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126878", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126878.json", + "dateUpdated": "2026-11-11T22:38:51.487Z" + }, + { + "cveId": "CVE-2026-126879", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126879", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126879.json", + "dateUpdated": "2026-11-11T22:38:49.336Z" + }, + { + "cveId": "CVE-2026-126880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126880.json", + "dateUpdated": "2026-11-11T22:38:59.706Z" + }, + { + "cveId": "CVE-2026-126881", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126881", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126881.json", + "dateUpdated": "2026-11-11T22:38:54.833Z" + }, + { + "cveId": "CVE-2026-126882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126882.json", + "dateUpdated": "2026-11-11T22:39:02.751Z" + }, + { + "cveId": "CVE-2026-126883", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126883", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126883.json", + "dateUpdated": "2026-11-11T22:39:01.657Z" + }, + { + "cveId": "CVE-2026-126884", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126884", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126884.json", + "dateUpdated": "2026-11-11T22:38:57.990Z" + }, + { + "cveId": "CVE-2026-126885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126885.json", + "dateUpdated": "2026-11-11T22:38:48.798Z" + }, + { + "cveId": "CVE-2026-126886", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126886", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126886.json", + "dateUpdated": "2026-11-11T22:38:50.583Z" + }, + { + "cveId": "CVE-2026-126887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126887.json", + "dateUpdated": "2026-11-11T22:38:50.760Z" + }, + { + "cveId": "CVE-2026-126888", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126888", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126888.json", + "dateUpdated": "2026-11-11T22:39:00.276Z" + }, + { + "cveId": "CVE-2026-126889", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126889", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126889.json", + "dateUpdated": "2026-11-11T22:38:50.139Z" + }, + { + "cveId": "CVE-2026-126890", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126890", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126890.json", + "dateUpdated": "2026-11-11T22:39:06.160Z" + }, + { + "cveId": "CVE-2026-126891", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126891", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126891.json", + "dateUpdated": "2026-11-11T22:38:56.095Z" + }, + { + "cveId": "CVE-2026-126892", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126892", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126892.json", + "dateUpdated": "2026-11-11T22:39:00.870Z" + }, + { + "cveId": "CVE-2026-126893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126893.json", + "dateUpdated": "2026-11-11T22:39:03.817Z" + }, + { + "cveId": "CVE-2026-126894", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126894", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126894.json", + "dateUpdated": "2026-11-11T22:38:58.184Z" + }, + { + "cveId": "CVE-2026-126895", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126895", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126895.json", + "dateUpdated": "2026-11-11T22:38:49.140Z" + }, + { + "cveId": "CVE-2026-126896", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126896", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126896.json", + "dateUpdated": "2026-11-11T22:38:55.392Z" + }, + { + "cveId": "CVE-2026-126897", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126897", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126897.json", + "dateUpdated": "2026-11-11T22:39:01.070Z" + }, + { + "cveId": "CVE-2026-126898", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126898", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126898.json", + "dateUpdated": "2026-11-11T22:38:53.164Z" + }, + { + "cveId": "CVE-2026-126899", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126899", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126899.json", + "dateUpdated": "2026-11-11T22:39:06.906Z" + }, + { + "cveId": "CVE-2026-126900", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126900", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126900.json", + "dateUpdated": "2026-11-11T22:38:53.907Z" + }, + { + "cveId": "CVE-2026-126901", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126901", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126901.json", + "dateUpdated": "2026-11-11T22:39:04.596Z" + }, + { + "cveId": "CVE-2026-126902", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126902", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126902.json", + "dateUpdated": "2026-11-11T22:39:05.414Z" + }, + { + "cveId": "CVE-2026-126903", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126903", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126903.json", + "dateUpdated": "2026-11-11T22:38:52.584Z" + }, + { + "cveId": "CVE-2026-126904", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126904", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126904.json", + "dateUpdated": "2026-11-11T22:38:54.096Z" + }, + { + "cveId": "CVE-2026-126905", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126905", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126905.json", + "dateUpdated": "2026-11-11T22:38:58.975Z" + }, + { + "cveId": "CVE-2026-126906", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126906", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126906.json", + "dateUpdated": "2026-11-11T22:39:03.140Z" + }, + { + "cveId": "CVE-2026-126907", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126907", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126907.json", + "dateUpdated": "2026-11-11T22:38:54.279Z" + }, + { + "cveId": "CVE-2026-126908", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126908", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126908.json", + "dateUpdated": "2026-11-11T22:39:04.238Z" + }, + { + "cveId": "CVE-2026-126909", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126909", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126909.json", + "dateUpdated": "2026-11-11T22:38:51.676Z" + }, + { + "cveId": "CVE-2026-126910", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126910", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126910.json", + "dateUpdated": "2026-11-11T22:38:52.770Z" + }, + { + "cveId": "CVE-2026-126911", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126911", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126911.json", + "dateUpdated": "2026-11-11T22:38:49.757Z" + }, + { + "cveId": "CVE-2026-126912", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126912", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126912.json", + "dateUpdated": "2026-11-11T22:38:51.126Z" + }, + { + "cveId": "CVE-2026-126913", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126913", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126913.json", + "dateUpdated": "2026-11-11T22:39:05.958Z" + }, + { + "cveId": "CVE-2026-126914", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126914", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126914.json", + "dateUpdated": "2026-11-11T22:38:59.534Z" + }, + { + "cveId": "CVE-2026-126915", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126915", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126915.json", + "dateUpdated": "2026-11-11T22:39:03.463Z" + }, + { + "cveId": "CVE-2026-126916", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126916", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126916.json", + "dateUpdated": "2026-11-11T22:38:52.403Z" + }, + { + "cveId": "CVE-2026-126917", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126917", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126917.json", + "dateUpdated": "2026-11-11T22:38:58.563Z" + }, + { + "cveId": "CVE-2026-126918", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126918", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126918.json", + "dateUpdated": "2026-11-11T22:38:56.649Z" + }, + { + "cveId": "CVE-2026-126919", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126919", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126919.json", + "dateUpdated": "2026-11-11T22:38:51.305Z" + }, + { + "cveId": "CVE-2026-126920", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126920", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126920.json", + "dateUpdated": "2026-11-11T22:39:06.670Z" + }, + { + "cveId": "CVE-2026-126921", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126921", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126921.json", + "dateUpdated": "2026-11-11T22:39:05.767Z" + }, + { + "cveId": "CVE-2026-126922", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126922", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126922.json", + "dateUpdated": "2026-11-11T22:38:59.338Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-11T22:37:44.296Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-125637", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125637", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125637.json", + "dateUpdated": "2026-11-11T22:35:12.202Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-108094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108094.json", + "dateUpdated": "2026-11-11T22:35:16.667Z" + }, + { + "cveId": "CVE-2026-119777", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119777", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119777.json", + "dateUpdated": "2026-11-11T22:35:11.648Z" + }, + { + "cveId": "CVE-2026-125712", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125712", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125712.json", + "dateUpdated": "2026-11-11T22:34:35.277Z" + }, + { + "cveId": "CVE-2026-43961", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-43961", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43961.json", + "dateUpdated": "2026-11-11T22:35:02.468Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-11T22:19:25.240Z", "numberOfChanges": 2, @@ -848056,1032 +848682,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-12T23:00:37.183Z", - "numberOfChanges": 1, - "new": [ - { - "cveId": "CVE-2026-108938", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108938", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108938.json", - "dateUpdated": "2026-10-12T23:00:18.581Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-12T22:54:48.216Z", - "numberOfChanges": 53, - "new": [ - { - "cveId": "CVE-2026-102627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102627.json", - "dateUpdated": "2026-10-12T22:48:19.639Z" - }, - { - "cveId": "CVE-2026-75076", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75076", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75076.json", - "dateUpdated": "2026-10-12T22:51:05.204Z" - }, - { - "cveId": "CVE-2026-75095", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75095", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75095.json", - "dateUpdated": "2026-10-12T22:50:47.686Z" - }, - { - "cveId": "CVE-2026-75621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75621.json", - "dateUpdated": "2026-10-12T22:50:30.872Z" - }, - { - "cveId": "CVE-2026-75782", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75782", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75782.json", - "dateUpdated": "2026-10-12T22:50:12.762Z" - }, - { - "cveId": "CVE-2026-92832", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92832", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92832.json", - "dateUpdated": "2026-10-12T22:49:54.346Z" - }, - { - "cveId": "CVE-2026-93891", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93891", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93891.json", - "dateUpdated": "2026-10-12T22:48:57.044Z" - }, - { - "cveId": "CVE-2026-93892", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93892", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93892.json", - "dateUpdated": "2026-10-12T22:48:36.527Z" - } - ], - "updated": [ - { - "cveId": "CVE-2025-27895", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-27895", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27895.json", - "dateUpdated": "2026-10-12T22:53:58.685Z" - }, - { - "cveId": "CVE-2025-27896", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-27896", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27896.json", - "dateUpdated": "2026-10-12T22:53:58.821Z" - }, - { - "cveId": "CVE-2025-27897", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-27897", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27897.json", - "dateUpdated": "2026-10-12T22:53:58.952Z" - }, - { - "cveId": "CVE-2025-27902", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-27902", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27902.json", - "dateUpdated": "2026-10-12T22:53:59.104Z" - }, - { - "cveId": "CVE-2026-103080", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103080", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103080.json", - "dateUpdated": "2026-10-12T22:54:00.096Z" - }, - { - "cveId": "CVE-2026-104332", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104332", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104332.json", - "dateUpdated": "2026-10-12T22:53:58.559Z" - }, - { - "cveId": "CVE-2026-104364", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104364", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104364.json", - "dateUpdated": "2026-10-12T22:53:58.431Z" - }, - { - "cveId": "CVE-2026-105466", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105466", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105466.json", - "dateUpdated": "2026-10-12T22:53:59.389Z" - }, - { - "cveId": "CVE-2026-107418", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107418", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107418.json", - "dateUpdated": "2026-10-12T22:54:00.660Z" - }, - { - "cveId": "CVE-2026-107862", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107862", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107862.json", - "dateUpdated": "2026-10-12T22:54:00.380Z" - }, - { - "cveId": "CVE-2026-108474", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108474", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108474.json", - "dateUpdated": "2026-10-12T22:54:01.330Z" - }, - { - "cveId": "CVE-2026-108475", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108475", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108475.json", - "dateUpdated": "2026-10-12T22:54:00.913Z" - }, - { - "cveId": "CVE-2026-108476", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108476", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108476.json", - "dateUpdated": "2026-10-12T22:54:01.038Z" - }, - { - "cveId": "CVE-2026-108477", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108477", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108477.json", - "dateUpdated": "2026-10-12T22:54:01.160Z" - }, - { - "cveId": "CVE-2026-108478", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108478", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108478.json", - "dateUpdated": "2026-10-12T22:54:00.791Z" - }, - { - "cveId": "CVE-2026-108479", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108479", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108479.json", - "dateUpdated": "2026-10-12T22:53:59.811Z" - }, - { - "cveId": "CVE-2026-108481", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108481", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108481.json", - "dateUpdated": "2026-10-12T22:53:59.945Z" - }, - { - "cveId": "CVE-2026-108482", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108482", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108482.json", - "dateUpdated": "2026-10-12T22:54:00.236Z" - }, - { - "cveId": "CVE-2026-108486", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108486", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108486.json", - "dateUpdated": "2026-10-12T22:54:00.527Z" - }, - { - "cveId": "CVE-2026-11936", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11936", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11936.json", - "dateUpdated": "2026-10-12T22:54:04.018Z" - }, - { - "cveId": "CVE-2026-11939", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11939", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11939.json", - "dateUpdated": "2026-10-12T22:54:02.265Z" - }, - { - "cveId": "CVE-2026-12091", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12091", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12091.json", - "dateUpdated": "2026-10-12T22:54:03.885Z" - }, - { - "cveId": "CVE-2026-16678", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16678", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16678.json", - "dateUpdated": "2026-10-12T22:53:58.146Z" - }, - { - "cveId": "CVE-2026-16830", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16830", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16830.json", - "dateUpdated": "2026-10-12T22:54:02.384Z" - }, - { - "cveId": "CVE-2026-18166", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18166", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18166.json", - "dateUpdated": "2026-10-12T22:53:59.246Z" - }, - { - "cveId": "CVE-2026-19493", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19493", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19493.json", - "dateUpdated": "2026-10-12T22:54:02.547Z" - }, - { - "cveId": "CVE-2026-22061", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-22061", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/22xxx/CVE-2026-22061.json", - "dateUpdated": "2026-10-12T22:54:01.465Z" - }, - { - "cveId": "CVE-2026-32645", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32645", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32645.json", - "dateUpdated": "2026-10-12T22:54:01.723Z" - }, - { - "cveId": "CVE-2026-39460", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-39460", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39460.json", - "dateUpdated": "2026-10-12T22:54:01.598Z" - }, - { - "cveId": "CVE-2026-42689", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42689", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42689.json", - "dateUpdated": "2026-10-12T22:53:59.670Z" - }, - { - "cveId": "CVE-2026-61994", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61994", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61994.json", - "dateUpdated": "2026-10-12T22:53:59.531Z" - }, - { - "cveId": "CVE-2026-78388", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78388", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78388.json", - "dateUpdated": "2026-10-12T22:54:02.999Z" - }, - { - "cveId": "CVE-2026-78399", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78399", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78399.json", - "dateUpdated": "2026-10-12T22:54:02.721Z" - }, - { - "cveId": "CVE-2026-81932", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81932", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81932.json", - "dateUpdated": "2026-10-12T22:54:02.136Z" - }, - { - "cveId": "CVE-2026-82096", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82096", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82096.json", - "dateUpdated": "2026-10-12T22:53:57.704Z" - }, - { - "cveId": "CVE-2026-82101", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82101", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82101.json", - "dateUpdated": "2026-10-12T22:53:57.446Z" - }, - { - "cveId": "CVE-2026-82108", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82108", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82108.json", - "dateUpdated": "2026-10-12T22:53:57.869Z" - }, - { - "cveId": "CVE-2026-82110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82110.json", - "dateUpdated": "2026-10-12T22:53:57.575Z" - }, - { - "cveId": "CVE-2026-84275", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84275", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84275.json", - "dateUpdated": "2026-10-12T22:54:04.180Z" - }, - { - "cveId": "CVE-2026-84276", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84276", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84276.json", - "dateUpdated": "2026-10-12T22:54:04.325Z" - }, - { - "cveId": "CVE-2026-84290", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84290", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84290.json", - "dateUpdated": "2026-10-12T22:54:04.458Z" - }, - { - "cveId": "CVE-2026-84418", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84418", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84418.json", - "dateUpdated": "2026-10-12T22:53:58.011Z" - }, - { - "cveId": "CVE-2026-85531", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85531", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85531.json", - "dateUpdated": "2026-10-12T22:54:01.978Z" - }, - { - "cveId": "CVE-2026-86405", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86405", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86405.json", - "dateUpdated": "2026-10-12T22:54:01.843Z" - }, - { - "cveId": "CVE-2026-96261", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96261", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96261.json", - "dateUpdated": "2026-10-12T22:53:58.291Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-12T22:46:23.811Z", - "numberOfChanges": 9, - "new": [ - { - "cveId": "CVE-2026-108937", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108937", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108937.json", - "dateUpdated": "2026-10-12T22:45:13.922Z" - }, - { - "cveId": "CVE-2026-17475", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17475", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17475.json", - "dateUpdated": "2026-10-12T22:40:31.923Z" - }, - { - "cveId": "CVE-2026-18541", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18541", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18541.json", - "dateUpdated": "2026-10-12T22:40:30.366Z" - }, - { - "cveId": "CVE-2026-19620", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19620", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19620.json", - "dateUpdated": "2026-10-12T22:40:28.325Z" - }, - { - "cveId": "CVE-2026-19622", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19622", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19622.json", - "dateUpdated": "2026-10-12T22:40:20.049Z" - }, - { - "cveId": "CVE-2026-19627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19627.json", - "dateUpdated": "2026-10-12T22:40:06.613Z" - }, - { - "cveId": "CVE-2026-75061", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75061", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75061.json", - "dateUpdated": "2026-10-12T22:40:15.871Z" - }, - { - "cveId": "CVE-2026-75063", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75063", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75063.json", - "dateUpdated": "2026-10-12T22:40:18.276Z" - }, - { - "cveId": "CVE-2026-85457", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85457", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85457.json", - "dateUpdated": "2026-10-12T22:40:03.709Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-12T22:34:34.612Z", - "numberOfChanges": 99, - "new": [ - { - "cveId": "CVE-2023-54406", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54406", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54406.json", - "dateUpdated": "2026-10-12T22:21:38.705Z" - }, - { - "cveId": "CVE-2023-54407", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54407", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54407.json", - "dateUpdated": "2026-10-12T22:21:40.021Z" - }, - { - "cveId": "CVE-2023-54408", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54408", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54408.json", - "dateUpdated": "2026-10-12T22:21:40.719Z" - }, - { - "cveId": "CVE-2023-54409", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54409", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54409.json", - "dateUpdated": "2026-10-12T22:21:41.415Z" - }, - { - "cveId": "CVE-2023-54410", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54410", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54410.json", - "dateUpdated": "2026-10-12T22:21:42.075Z" - }, - { - "cveId": "CVE-2023-54411", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54411", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54411.json", - "dateUpdated": "2026-10-12T22:21:42.973Z" - }, - { - "cveId": "CVE-2023-54412", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54412", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54412.json", - "dateUpdated": "2026-10-12T22:21:43.610Z" - }, - { - "cveId": "CVE-2024-58390", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-58390", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/58xxx/CVE-2024-58390.json", - "dateUpdated": "2026-10-12T22:21:44.339Z" - }, - { - "cveId": "CVE-2024-58391", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-58391", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/58xxx/CVE-2024-58391.json", - "dateUpdated": "2026-10-12T22:21:45.089Z" - }, - { - "cveId": "CVE-2025-71430", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71430", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71430.json", - "dateUpdated": "2026-10-12T22:21:46.441Z" - }, - { - "cveId": "CVE-2025-71431", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71431", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71431.json", - "dateUpdated": "2026-10-12T22:21:47.075Z" - }, - { - "cveId": "CVE-2025-71432", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71432", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71432.json", - "dateUpdated": "2026-10-12T22:21:47.881Z" - }, - { - "cveId": "CVE-2026-108936", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108936", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108936.json", - "dateUpdated": "2026-10-12T22:30:14.458Z" - }, - { - "cveId": "CVE-2026-109572", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109572", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109572.json", - "dateUpdated": "2026-10-12T22:21:48.699Z" - }, - { - "cveId": "CVE-2026-109573", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109573", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109573.json", - "dateUpdated": "2026-10-12T22:21:49.354Z" - }, - { - "cveId": "CVE-2026-109574", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109574", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109574.json", - "dateUpdated": "2026-10-12T22:21:50.021Z" - }, - { - "cveId": "CVE-2026-109595", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109595", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109595.json", - "dateUpdated": "2026-10-12T22:21:50.696Z" - }, - { - "cveId": "CVE-2026-109596", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109596", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109596.json", - "dateUpdated": "2026-10-12T22:21:51.306Z" - }, - { - "cveId": "CVE-2026-109597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109597.json", - "dateUpdated": "2026-10-12T22:21:51.941Z" - }, - { - "cveId": "CVE-2026-109598", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109598", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109598.json", - "dateUpdated": "2026-10-12T22:21:52.587Z" - }, - { - "cveId": "CVE-2026-109599", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109599", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109599.json", - "dateUpdated": "2026-10-12T22:21:53.213Z" - }, - { - "cveId": "CVE-2026-109600", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109600", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109600.json", - "dateUpdated": "2026-10-12T22:21:53.808Z" - }, - { - "cveId": "CVE-2026-109601", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109601", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109601.json", - "dateUpdated": "2026-10-12T22:21:54.472Z" - }, - { - "cveId": "CVE-2026-109602", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109602", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109602.json", - "dateUpdated": "2026-10-12T22:21:55.160Z" - }, - { - "cveId": "CVE-2026-109603", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109603", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109603.json", - "dateUpdated": "2026-10-12T22:21:55.804Z" - }, - { - "cveId": "CVE-2026-109604", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109604", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109604.json", - "dateUpdated": "2026-10-12T22:21:56.499Z" - }, - { - "cveId": "CVE-2026-109608", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109608", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109608.json", - "dateUpdated": "2026-10-12T22:21:57.198Z" - }, - { - "cveId": "CVE-2026-109609", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109609", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109609.json", - "dateUpdated": "2026-10-12T22:21:57.854Z" - }, - { - "cveId": "CVE-2026-109610", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109610", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109610.json", - "dateUpdated": "2026-10-12T22:21:58.500Z" - }, - { - "cveId": "CVE-2026-109611", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109611", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109611.json", - "dateUpdated": "2026-10-12T22:21:59.119Z" - }, - { - "cveId": "CVE-2026-109612", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109612", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109612.json", - "dateUpdated": "2026-10-12T22:21:59.712Z" - }, - { - "cveId": "CVE-2026-109613", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109613", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109613.json", - "dateUpdated": "2026-10-12T22:22:00.386Z" - }, - { - "cveId": "CVE-2026-109614", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109614", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109614.json", - "dateUpdated": "2026-10-12T22:22:01.110Z" - }, - { - "cveId": "CVE-2026-109615", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109615", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109615.json", - "dateUpdated": "2026-10-12T22:22:01.804Z" - }, - { - "cveId": "CVE-2026-109616", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109616", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109616.json", - "dateUpdated": "2026-10-12T22:22:02.395Z" - }, - { - "cveId": "CVE-2026-109617", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109617", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109617.json", - "dateUpdated": "2026-10-12T22:22:03.078Z" - }, - { - "cveId": "CVE-2026-109621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109621.json", - "dateUpdated": "2026-10-12T22:22:03.717Z" - }, - { - "cveId": "CVE-2026-109622", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109622", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109622.json", - "dateUpdated": "2026-10-12T22:22:04.355Z" - }, - { - "cveId": "CVE-2026-109623", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109623", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109623.json", - "dateUpdated": "2026-10-12T22:22:05.038Z" - }, - { - "cveId": "CVE-2026-109624", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109624", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109624.json", - "dateUpdated": "2026-10-12T22:22:05.731Z" - }, - { - "cveId": "CVE-2026-109625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109625.json", - "dateUpdated": "2026-10-12T22:22:06.397Z" - }, - { - "cveId": "CVE-2026-109626", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109626", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109626.json", - "dateUpdated": "2026-10-12T22:22:07.020Z" - }, - { - "cveId": "CVE-2026-109627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109627.json", - "dateUpdated": "2026-10-12T22:22:07.643Z" - }, - { - "cveId": "CVE-2026-109628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109628.json", - "dateUpdated": "2026-10-12T22:22:08.326Z" - }, - { - "cveId": "CVE-2026-109629", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109629", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109629.json", - "dateUpdated": "2026-10-12T22:22:09.019Z" - }, - { - "cveId": "CVE-2026-109630", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109630", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109630.json", - "dateUpdated": "2026-10-12T22:22:09.679Z" - }, - { - "cveId": "CVE-2026-109631", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109631", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109631.json", - "dateUpdated": "2026-10-12T22:22:10.282Z" - }, - { - "cveId": "CVE-2026-109632", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109632", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109632.json", - "dateUpdated": "2026-10-12T22:22:10.972Z" - }, - { - "cveId": "CVE-2026-109633", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109633", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109633.json", - "dateUpdated": "2026-10-12T22:22:11.618Z" - }, - { - "cveId": "CVE-2026-109634", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109634", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109634.json", - "dateUpdated": "2026-10-12T22:22:12.243Z" - }, - { - "cveId": "CVE-2026-109635", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109635", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109635.json", - "dateUpdated": "2026-10-12T22:22:12.936Z" - }, - { - "cveId": "CVE-2026-109636", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109636", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109636.json", - "dateUpdated": "2026-10-12T22:22:13.529Z" - }, - { - "cveId": "CVE-2026-109637", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109637", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109637.json", - "dateUpdated": "2026-10-12T22:22:14.216Z" - }, - { - "cveId": "CVE-2026-109638", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109638", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109638.json", - "dateUpdated": "2026-10-12T22:22:14.838Z" - }, - { - "cveId": "CVE-2026-109639", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109639", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109639.json", - "dateUpdated": "2026-10-12T22:22:15.484Z" - }, - { - "cveId": "CVE-2026-109640", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109640", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109640.json", - "dateUpdated": "2026-10-12T22:22:16.189Z" - }, - { - "cveId": "CVE-2026-109641", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109641", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109641.json", - "dateUpdated": "2026-10-12T22:22:16.788Z" - }, - { - "cveId": "CVE-2026-109642", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109642", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109642.json", - "dateUpdated": "2026-10-12T22:22:17.379Z" - }, - { - "cveId": "CVE-2026-109643", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109643", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109643.json", - "dateUpdated": "2026-10-12T22:22:17.998Z" - }, - { - "cveId": "CVE-2026-109644", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109644", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109644.json", - "dateUpdated": "2026-10-12T22:22:18.672Z" - }, - { - "cveId": "CVE-2026-109645", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109645", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109645.json", - "dateUpdated": "2026-10-12T22:22:19.345Z" - }, - { - "cveId": "CVE-2026-109646", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109646", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109646.json", - "dateUpdated": "2026-10-12T22:22:19.988Z" - }, - { - "cveId": "CVE-2026-109647", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109647", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109647.json", - "dateUpdated": "2026-10-12T22:22:20.612Z" - }, - { - "cveId": "CVE-2026-109648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109648.json", - "dateUpdated": "2026-10-12T22:22:21.280Z" - }, - { - "cveId": "CVE-2026-109649", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109649", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109649.json", - "dateUpdated": "2026-10-12T22:22:21.935Z" - }, - { - "cveId": "CVE-2026-109650", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109650", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109650.json", - "dateUpdated": "2026-10-12T22:22:22.629Z" - }, - { - "cveId": "CVE-2026-109651", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109651", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109651.json", - "dateUpdated": "2026-10-12T22:22:23.264Z" - }, - { - "cveId": "CVE-2026-109652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109652.json", - "dateUpdated": "2026-10-12T22:22:23.915Z" - }, - { - "cveId": "CVE-2026-109653", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109653", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109653.json", - "dateUpdated": "2026-10-12T22:22:24.555Z" - }, - { - "cveId": "CVE-2026-109654", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109654", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109654.json", - "dateUpdated": "2026-10-12T22:22:25.155Z" - }, - { - "cveId": "CVE-2026-109655", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109655", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109655.json", - "dateUpdated": "2026-10-12T22:22:25.822Z" - }, - { - "cveId": "CVE-2026-109656", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109656", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109656.json", - "dateUpdated": "2026-10-12T22:22:26.493Z" - }, - { - "cveId": "CVE-2026-109657", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109657", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109657.json", - "dateUpdated": "2026-10-12T22:22:27.164Z" - }, - { - "cveId": "CVE-2026-109658", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109658", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109658.json", - "dateUpdated": "2026-10-12T22:22:27.775Z" - }, - { - "cveId": "CVE-2026-109659", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109659", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109659.json", - "dateUpdated": "2026-10-12T22:22:28.377Z" - }, - { - "cveId": "CVE-2026-109660", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109660", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109660.json", - "dateUpdated": "2026-10-12T22:22:28.973Z" - }, - { - "cveId": "CVE-2026-109661", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109661", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109661.json", - "dateUpdated": "2026-10-12T22:22:29.645Z" - }, - { - "cveId": "CVE-2026-109662", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109662", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109662.json", - "dateUpdated": "2026-10-12T22:22:30.244Z" - }, - { - "cveId": "CVE-2026-109663", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109663", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109663.json", - "dateUpdated": "2026-10-12T22:22:30.876Z" - }, - { - "cveId": "CVE-2026-109664", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109664", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109664.json", - "dateUpdated": "2026-10-12T22:22:31.573Z" - }, - { - "cveId": "CVE-2026-109665", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109665", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109665.json", - "dateUpdated": "2026-10-12T22:22:32.224Z" - }, - { - "cveId": "CVE-2026-109666", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109666", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109666.json", - "dateUpdated": "2026-10-12T22:22:32.901Z" - }, - { - "cveId": "CVE-2026-109667", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109667", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109667.json", - "dateUpdated": "2026-10-12T22:22:33.562Z" - }, - { - "cveId": "CVE-2026-109668", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109668", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109668.json", - "dateUpdated": "2026-10-12T22:22:34.237Z" - }, - { - "cveId": "CVE-2026-109669", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109669", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109669.json", - "dateUpdated": "2026-10-12T22:22:34.830Z" - }, - { - "cveId": "CVE-2026-109670", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109670", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109670.json", - "dateUpdated": "2026-10-12T22:22:35.500Z" - }, - { - "cveId": "CVE-2026-109671", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109671", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109671.json", - "dateUpdated": "2026-10-12T22:22:36.142Z" - }, - { - "cveId": "CVE-2026-109672", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109672", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109672.json", - "dateUpdated": "2026-10-12T22:22:36.829Z" - }, - { - "cveId": "CVE-2026-109673", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109673", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109673.json", - "dateUpdated": "2026-10-12T22:22:37.497Z" - }, - { - "cveId": "CVE-2026-109674", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109674", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109674.json", - "dateUpdated": "2026-10-12T22:22:38.179Z" - }, - { - "cveId": "CVE-2026-109675", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109675", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109675.json", - "dateUpdated": "2026-10-12T22:22:38.881Z" - }, - { - "cveId": "CVE-2026-82096", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82096", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82096.json", - "dateUpdated": "2026-10-12T22:25:59.335Z" - }, - { - "cveId": "CVE-2026-82101", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82101", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82101.json", - "dateUpdated": "2026-10-12T22:26:35.727Z" - }, - { - "cveId": "CVE-2026-82103", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82103", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82103.json", - "dateUpdated": "2026-10-12T22:26:26.181Z" - }, - { - "cveId": "CVE-2026-82108", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82108", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82108.json", - "dateUpdated": "2026-10-12T22:25:50.793Z" - }, - { - "cveId": "CVE-2026-82110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82110.json", - "dateUpdated": "2026-10-12T22:26:13.506Z" - }, - { - "cveId": "CVE-2026-84418", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84418", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84418.json", - "dateUpdated": "2026-10-12T22:25:41.758Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-33818", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", - "dateUpdated": "2026-10-12T22:29:08.900Z" - }, - { - "cveId": "CVE-2026-42504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", - "dateUpdated": "2026-10-12T22:29:07.589Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-12T22:21:34.649Z", - "numberOfChanges": 2, - "new": [ - { - "cveId": "CVE-2026-108935", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108935", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108935.json", - "dateUpdated": "2026-10-12T22:15:11.734Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-103658", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103658", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103658.json", - "dateUpdated": "2026-10-12T22:12:10.457Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index e9d2c5d3df..833baafa39 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "c22b909bf490e58c52c0f4f55c3e1ab74ae9974e", + "upstream_commit": "8726e0370379b620c185a8f46e5075fb78162348", "since_year": 2017, - "records": 331300, - "synced_at_utc": "2026-11-11T22:27:44.565536+00:00" + "records": 331391, + "synced_at_utc": "2026-11-11T23:24:32.871760+00:00" }