CVE-2026-18397P2CRITICALCVSS 9.4fixed in 2.16.1.02026-10-01
CVE-2026-18397 [CRITICAL] CWE-130 CVE-2026-18397: This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by expl
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.
The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing mali
nvd