CVE-2026-46681: Improperly Controlled Modification of Object Prototype Attributes
CVE-2026-16410: Access of Resource Using Incompatible Type
CVE-2026-16392: Always-Incorrect Control Flow Implementation
CVE-2026-16369: Integer Overflow or Wraparound
CVE-2026-16368: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2026-16355: Access of Resource Using Incompatible Type
CVE-2026-64628: Improper Neutralization of Input During Web Page Generation
CVE-2026-16266: Improperly Controlled Modification of Object Prototype Attributes
CVE-2026-44230: Improper Neutralization of Input During Web Page Generation
CVE-2026-44229: Improper Neutralization of Input During Web Page Generation
CVE-2026-44228: Improper Neutralization of Input During Web Page Generation
CVE-2026-44227: Improper Neutralization of Input During Web Page Generation
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
