CVE WatchOct 9, 2026

CVE-2025-11015

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBI

CVSS

5.3

Medium

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Sep 26, 2025 · Last modified: Oct 9, 2026 · CWE-119 · CWE-762

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-09-232026-10-20

Technical description

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-11374410.0 CRI

—

——0A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.1d CVE-2026-1133438.8 HIG

—

——0Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)23h CVE-2026-1133429.6 CRI

—

——0Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1d CVE-2026-113341—

—

——0Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)1d CVE-2026-113340—

—

——0Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1d CVE-2026-1133378.8 HIG

—

——0Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)23h