Actor component Protected Information Access

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Password Component Access Information Disclosure

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

SiteIsolation Component Google Chrome Microsoft Edge Protected Information

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Google Chrome Edge FileSystem Data Compromise

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Edge GetUserMedia Information Disclosure

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Forms Component Google Chrome Microsoft Edge Protected Information Access

The vulnerability of the Forms component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

TabGroups Component Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the DOM components in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Transactions Platform XSS

The vulnerability of the Transactions Platform web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Sensor Component Protected Information Access

The vulnerability of the Sensor component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Loader Component Protected Information Access

The vulnerability of the Loader component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Password Component Access Information Disclosure

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

WebProtect Components Protected Information Access

The vulnerability of the WebProtect components for Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Editing Component Protected Information Access

The vulnerability of the Editing component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Network Device Enrollment Service Code Execution

The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

USB Component Compromise Protected Information

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

RockyLinux 10 : curl (RLSA-2026:80512)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80512 advisory. curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies CVE-2026-6253 curl: libcurl: Authentication bypass due to incorrect HT...

PT-2026-114176

Name of the Vulnerable Software and Affected Versions Better Auth versions 1.4.0-beta.18 through 1.7.6 Description An authentication bypass allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. An attacker can initiate an OAuth sign-in...