CVE-2015-5237High· 8.8▾ Twilightprotobuf susceptible to buffer overflow
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
5.1%
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
Google.Protobuf < 3.4.0com.google.protobuf:protobuf-parent < 3.4.0github.com/protocolbuffers/protobuf < 3.4.0google/protobuf < 3.4.0protobuf < 3.4.0Upgrade to a patched release:
Google.Protobuf 3.4.0com.google.protobuf:protobuf-parent 3.4.0github.com/protocolbuffers/protobuf 3.4.0google/protobuf 3.4.0protobuf 3.4.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder
CVE-2026-115522Medium· 5.3Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python
CVE-2026-118344High· 8.8Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-118306NoneMemory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
CVE-2026-118350High· 8.8Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-118348High· 8.8Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page