46114 matches found
CVE-2026-14410
Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
MAL-2026-6717 Malicious code in test-pkg-x0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0014944456f668a25fa484bf7cb5f36a7128d6a585b86d9294d8d49b23049a Package declares scripts.postinstall pointing at shim.js, a script that runs unconditionally on npm install. shim.js branches on uname -s...
CVE-2024-0741 vulnerabilities
Vulnerabilities for packages: firefox-esr...
CVE-2026-50521 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-34098
Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...
CVE-2023-5728 vulnerabilities
Vulnerabilities for packages: firefox-esr...
CVE-2025-13023 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-11710 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-7JCF-W576-JVJ3 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-5JPH-4X8H-WX83 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-3516 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-6428 vulnerabilities
Vulnerabilities for packages: firefox...
AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware concepts with a real browser capability" to turn it into a working ransomware technique that runs entirely inside the browser on both...
CVE-2026-14101
An insufficient policy enforcement flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513454805...
EUVD-2026-40843
Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-40426
Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...
EUVD-2026-40741
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-40719
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Low...
EUVD-2026-40689
Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...