{"vulnerability": "CVE-2026-8509", "sightings": [{"uuid": "e3db9760-1245-4ea2-a514-d7b3ebfc9a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8509", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "37745353-38b8-42f7-8f39-51fb86f15ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8509", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyn5xb2ny2g", "content": "\ud83d\udfe0 CVE-2026-8509 - High (8.8)\n\nHeap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8509/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T20:00:28.324410Z"}, {"uuid": "867e3dd0-369d-4973-ba54-4700f1d437df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8509", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "3efb029c-a182-4746-8ccb-477446bb0774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8509", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndtyu3grk2u", "content": "\u300cChrome\u300d\u3067\u8106\u5f31\u602779\u4ef6\u3092\u4fee\u6b63 - 14\u4ef6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\n\nGoogle\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670812\u65e5\u3001\u30d6\u30e9\u30a6\u30b6\u300cChrome\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u591a\u6570\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u300cWebML\u300d\u306b\u304a\u3051\u308b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u300cCVE-2026-8509\u300d\u3084\u3001Skia\u306e\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u300cCVE-2026-8510\u300d\u3092\u306f\u3058\u3081\u3001\u300cUI\u300d\u300cFileSystem\u300d\u300cInput\u300d\u300cAura\u300d\u300cHID\u300d\u300cDataTransfer\u300d\u300cWebShare\u300d\u300cBlink\u300d\u300cANGLE\u300d\u300cPayments\u300d\u300cTab Groups\u300d\u300cDownl...", "creation_timestamp": "2026-06-03T00:27:23.701585Z"}, {"uuid": "62a3eeed-2dc5-4294-a774-5310e2ecac5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8509", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1917", "content": "", "creation_timestamp": "2026-06-10T21:00:00.000000Z"}, {"uuid": "c7e54d6d-9f1f-4a35-b803-cc9b98999eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/37jr6kcrylmj5", "content": "CVE-2026-85093 - Cheshire Cat AI Memory Access Control Bypass\nCVE ID : CVE-2026-85093\n \n Published : Sept. 3, 2026, 2:20 a.m. | 57\u00a0minutes ago\n \n Description : Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retr...", "creation_timestamp": "2026-09-03T03:27:30.546253Z"}, {"uuid": "62f47d93-b410-41f5-8990-8967ab5a26ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iot6a7zysobaq", "content": "CVE-2026-85092 - LiME Arbitrary File Overwrite Vulnerability\nCVE ID : CVE-2026-85092\n \n Published : Sept. 3, 2026, 2:20 a.m. | 57\u00a0minutes ago\n \n Description : LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the op...", "creation_timestamp": "2026-09-03T03:33:29.444227Z"}, {"uuid": "c2e519d8-02a2-41f9-a1b6-7fd5bd78ef26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gglxvbvk5dneq", "content": "CVE-2026-85091 - zlib Heap Buffer Overflow\nCVE ID : CVE-2026-85091\n \n Published : Sept. 3, 2026, 2:20 a.m. | 57\u00a0minutes ago\n \n Description : zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blockin...", "creation_timestamp": "2026-09-03T03:39:29.454097Z"}, {"uuid": "f1c40bd8-3731-4f69-9cc9-3b77ed8c3f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j5vsxotiacu2n", "content": "CVE-2026-85094 - Canva Android App WebView Cross-Origin Vulnerability\nCVE ID : CVE-2026-85094\n \n Published : Sept. 4, 2026, 6:02 a.m. | 34\u00a0minutes ago\n \n Description : The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a...", "creation_timestamp": "2026-09-04T07:04:39.640496Z"}, {"uuid": "6cfa89fc-355b-4156-b36d-cd19146c3299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoip2kztd2l", "content": "\ud83d\udfe0 CVE-2026-85094 - High (8.8)\n\nThe Canva Android App  before 2.376.0 did not restrict the headers returned to an external origin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85094/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:40.980607Z"}]}