{"vulnerability": "cve-2026-1438", "sightings": [{"uuid": "ffd8b193-9bb2-4c2b-a198-0b47e012c343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14381", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:22:51.470008Z"}, {"uuid": "b6322c12-076d-440d-8359-c1163ebcd416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14382", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:22:56.334120Z"}, {"uuid": "b28a1983-cb52-4a95-bafc-ad4c47a06247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14383", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:22:58.999715Z"}, {"uuid": "363578f2-cdbb-4b73-a3b4-379b7a66c783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14384", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:23:17.076294Z"}, {"uuid": "e4a37173-b498-4e50-89e5-bae4b012ac0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14385", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:23:20.618759Z"}, {"uuid": "132700c7-418d-4871-aeba-3d42fd79a385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14386", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:23:53.905493Z"}, {"uuid": "7e6b2ed3-f690-4876-8545-828022d3219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14387", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:24:09.265810Z"}, {"uuid": "10581e43-6cb6-48b0-bcb4-51167e6ec386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14388", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:24:17.340925Z"}, {"uuid": "8e2186c3-d7a4-4e34-bf48-06a4c288b0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14389", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:24:23.277536Z"}, {"uuid": "4f963813-ad33-4ef3-a9d2-f1665a542e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14381", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1942", "content": "", "creation_timestamp": "2026-07-02T09:46:07.826933Z"}, {"uuid": "951c88f6-69f8-4462-8b25-e83246a9265f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14386", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoigwezxq2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14386 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u043d\u0438\u0446 \u0447\u0442\u0435\u043d\u0438\u044f \u0432 ANGLE\n\n\n\nhttps://kripta.biz/posts/3CF1F13A-F2C4-4119-99F7-41B05C79AD95", "creation_timestamp": "2026-07-02T16:50:09.116484Z"}, {"uuid": "3023530b-e45a-47ce-a49e-e2fff7b9db2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14388", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoiho474i2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14388 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u044f \u0432 ANGLE\n\n\n\nhttps://kripta.biz/posts/78BBB23B-77E2-4D2A-8DB2-AACFBE8D55C6", "creation_timestamp": "2026-07-02T16:50:33.706976Z"}, {"uuid": "3f1c0f48-ab04-44a1-bd06-ce650807ec13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14383", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoiw26aku2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14383 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B5D08B03-889E-48FF-AAD8-A55EECA7CC2D", "creation_timestamp": "2026-07-02T16:58:36.018243Z"}, {"uuid": "b91c42db-56bd-404b-bdf3-834095af8a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14382", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjm7rci2i", "content": "CVE-2026-14382\nGoogle Chrome's security features can be bypassed by a malicious website. This means an attacker could potentially take control of a user's computer. To fix this, update Google Chrome to the latest version.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-02T21:20:04.917310Z"}, {"uuid": "7fa6639e-de97-416b-ba4a-ce80023878d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14387", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjngwe727", "content": "CVE-2026-14387\nA vulnerability in Google Chrome's graphics library, Skia, could allow a malicious website to break out of the browser's security sandbox. This could potentially allow an attacker to access sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-02T21:20:06.283094Z"}, {"uuid": "051310ea-3d57-48a4-8f94-6199076d269f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14389", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7ogsdv22y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14389 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia\n\n\n\nhttps://kripta.biz/posts/1FAF0E92-344F-4C7E-9497-4FFCA0EC6A9D", "creation_timestamp": "2026-07-03T09:18:36.775315Z"}, {"uuid": "7d8f7634-3976-4458-97b7-702b057b67a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14388", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqa2jvdoj2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14388 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0447\u0442\u0435\u043d\u0438\u044f \u0432 ANGLE\n\n\n\nhttps://kripta.biz/posts/D1A41AD2-CF3F-4EE1-B895-2E633C985F25", "creation_timestamp": "2026-07-03T09:25:22.543579Z"}, {"uuid": "a185d7c4-eba2-485b-be42-85650f5820c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14384", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqijvibth2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14384 \u0432 Google Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 Out of Bounds Read \u0432 ANGLE\n\n\n\nhttps://kripta.biz/posts/E90838DC-C12B-4450-98E0-3CE6256266AA", "creation_timestamp": "2026-07-03T11:57:08.392768Z"}, {"uuid": "8d2c25c1-7472-459f-ac46-af59cb7dfeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14380", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq3pggr5xk24", "content": "CVE-2026-14380: DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile", "creation_timestamp": "2026-07-07T22:59:45.467806Z"}, {"uuid": "4ccecca0-74b6-4cf3-9a05-05419a591459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14380", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116881414084354305", "content": "CVE-2026-14380 | CRITICAL eval injection in HMBRAND DBI <1.650 lets attackers execute arbitrary Perl code via Profile. Remote code exec possible with exposed DBI::Gofer/ProxyServer. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-14380-cwe-95-improper-neutralization-of-d-632b564b1d788778 #OffSeq #Perl #Security", "creation_timestamp": "2026-07-08T00:00:45.531392Z"}, {"uuid": "6278d6aa-1220-47f0-b4a0-a6e9a332870c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14380", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq3stiucln2f", "content": "HMBRAND DBI <1.650 hit by CRITICAL eval injection (CVE-2026-14380) \u2014 attackers can execute arbitrary Perl code if Profile is attacker-controlled. Limit exposure & await vendor patch. https://radar.offseq.com/threat/cve-2026-14380-cwe-95-improper-neutralization-of-d-632b564b1d788778 #OffSeq #Perl ...", "creation_timestamp": "2026-07-08T00:00:45.917355Z"}, {"uuid": "f856ec1f-2c83-4988-b82f-0a097a07fac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14380", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3v42sffb27", "content": "CVE-2026-14380 - DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile\nCVE ID : CVE-2026-14380\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : DBI versions before 1.650 for Perl are vulnerable to code inject...", "creation_timestamp": "2026-07-08T00:41:19.806447Z"}, {"uuid": "f4fa5283-399f-4eda-8d28-47d90c3753a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14380", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mq4dpr2fx322", "content": "Daily IT Security Digest \u2014 2026-07-08\nimproper authentication accepting unauthenticated GATT commands; GPAC has a NULL pointer dereference in MPD stream parsing.\nSources: Mastodon #infosec, #vulnerability, Bluesky cybersec-hub\n\n10. **HMBRAND DBI Critical Eval Injection (CVE-2026-14380)**\nA critical", "creation_timestamp": "2026-07-08T05:02:53.376811Z"}, {"uuid": "4fa97971-4a0c-42c9-8805-61e6c99574c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14380", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqctqlhinh22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14380 \u0432 DBI \u0434\u043b\u044f Perl: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u043a\u043e\u0434\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0DDE5E4E-3637-4DC6-9CE0-AB5E79F17CB6", "creation_timestamp": "2026-07-10T19:05:39.384011Z"}, {"uuid": "26d6182f-9b0f-45a1-b535-94758bfd3526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14382", "type": "seen", "source": "https://t.me/GithubRedTeam/92436", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-14382\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jaf0rk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 02:47:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.698560Z"}, {"uuid": "5c2a969e-9227-424e-8c15-6ef4dcf4f697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14382", "type": "seen", "source": "https://t.me/GithubRedTeam/92436", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-14382\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jaf0rk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 02:47:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.004083Z"}, {"uuid": "a7b65436-40b8-418f-b038-14e008190908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14382", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92436", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-14382\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jaf0rk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 02:47:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.722403Z"}]}