Skip to content

Commit 2c2bf2e

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 5b87d8c commit 2c2bf2e

File tree

30 files changed

+1114
-1
lines changed

30 files changed

+1114
-1
lines changed

‎advisories/unreviewed/2026/04/GHSA-2275-4rpp-82v7/GHSA-2275-4rpp-82v7.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2275-4rpp-82v7",
4+
"modified": "2026-04-01T06:31:33Z",
5+
"published": "2026-04-01T06:31:33Z",
6+
"aliases": [
7+
"CVE-2026-5292"
8+
],
9+
"details": "Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5292"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/492213293"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-125"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:02Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-2739-cxg4-jp3j/GHSA-2739-cxg4-jp3j.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2739-cxg4-jp3j",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5284"
8+
],
9+
"details": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5284"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/492139412"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-416"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:01Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-2q94-wprw-25w4/GHSA-2q94-wprw-25w4.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2q94-wprw-25w4",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5279"
8+
],
9+
"details": "Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5279"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/490642836"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [],
28+
"severity": null,
29+
"github_reviewed": false,
30+
"github_reviewed_at": null,
31+
"nvd_published_at": "2026-04-01T05:16:01Z"
32+
}
33+
}

‎advisories/unreviewed/2026/04/GHSA-3rff-rg87-9c8x/GHSA-3rff-rg87-9c8x.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3rff-rg87-9c8x",
4+
"modified": "2026-04-01T06:31:33Z",
5+
"published": "2026-04-01T06:31:33Z",
6+
"aliases": [
7+
"CVE-2026-5290"
8+
],
9+
"details": "Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5290"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/496205576"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-416"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:02Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-4c6f-f3m2-g3pw/GHSA-4c6f-f3m2-g3pw.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4c6f-f3m2-g3pw",
4+
"modified": "2026-04-01T06:31:31Z",
5+
"published": "2026-04-01T06:31:31Z",
6+
"aliases": [
7+
"CVE-2026-5252"
8+
],
9+
"details": "A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/message.js of the component Message Create Endpoint. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5252"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-10"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/submit/780613"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/vuln/354442"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/354442/cti"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-79"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-04-01T04:17:11Z"
51+
}
52+
}

‎advisories/unreviewed/2026/04/GHSA-4j5r-7xc7-9pr6/GHSA-4j5r-7xc7-9pr6.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4j5r-7xc7-9pr6",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5276"
8+
],
9+
"details": "Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5276"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/489711638"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [],
28+
"severity": null,
29+
"github_reviewed": false,
30+
"github_reviewed_at": null,
31+
"nvd_published_at": "2026-04-01T05:16:00Z"
32+
}
33+
}

‎advisories/unreviewed/2026/04/GHSA-63vg-wchr-j5wj/GHSA-63vg-wchr-j5wj.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-63vg-wchr-j5wj",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5278"
8+
],
9+
"details": "Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5278"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/490254128"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-416"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:01Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-68r5-52qj-jm6w/GHSA-68r5-52qj-jm6w.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-68r5-52qj-jm6w",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5282"
8+
],
9+
"details": "Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5282"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/491655161"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-125"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:01Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-6mjm-fq7h-cm4p/GHSA-6mjm-fq7h-cm4p.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6mjm-fq7h-cm4p",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5277"
8+
],
9+
"details": "Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5277"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/489791424"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-472"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:00Z"
34+
}
35+
}

‎advisories/unreviewed/2026/04/GHSA-6r8r-3947-g6p3/GHSA-6r8r-3947-g6p3.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6r8r-3947-g6p3",
4+
"modified": "2026-04-01T06:31:32Z",
5+
"published": "2026-04-01T06:31:32Z",
6+
"aliases": [
7+
"CVE-2026-5275"
8+
],
9+
"details": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5275"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://issues.chromium.org/issues/489494022"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-122"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-01T05:16:00Z"
34+
}
35+
}

0 commit comments

Comments
 (0)