The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge, which allows a hacker to trigger a service failure

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84833: Uncontrolled Resource Consumption

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...

PT-2026-84839

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the Browser component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Browser component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

FreeBSD : chromium -- security fixes (19d0eaf5-a698-11f1-bf98-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 19d0eaf5-a698-11f1-bf98-a8a1599412c6 advisory. Chrome Releases reports: This update includes 26 security fixes: Tenable has extracted the...

CVE-2026-19219: Insufficient Verification of Data Authenticity

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-84349

A use after free vulnerability in the Browser component of Google Chrome (prior to version 152.0.7977.75) and Microsoft Edge allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox using a crafted HTML page. This vulnerability is also presen...

mitaka v2.10.1

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

MAL-2026-15811 Malicious code in syswatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...

Malicious code in syswatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-84125

A flaw was found in Firefox. A use-after-free vulnerability in the DOM: Core & HTML component could allow a remote attacker to execute arbitrary code...

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84124

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84128

Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84121

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...