CVE-2026-73653

A flaw was found in Vitest. A remote attacker, by sending specially crafted commands to the Browser Mode API, could bypass file access restrictions. This allows the attacker to read, create, overwrite, or delete arbitrary files on the system where Vitest is running, even when file write permissio...

CVE-2026-82072

An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

fingerprint-pro-internals — Updated!

Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources | ---|--- 143 signals, one row each| surfaces touched, status codes, constants compared, value shape The agent,...

Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)

The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability: - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts with 'Mozilla'. The Fetch specification allows...

PT-2026-84193

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security...

CVE-2026-82811

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

[SECURITY] Fedora 43 Update: epiphany-49.9.1-1.fc43

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...

CVE-2026-82811 Toggl OÜ Toggl Track Extension postMessage origin validation

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

chromium-browser: libyuv: chromium-browser: Heap buffer overflow in libyuv

A heap buffer overflow flaw was found in the libyuv component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514748734...

npm-demo

Demostración del Navegador NPM/JavaScript Para instrucciones sobre cómo ejecutar y usar esta demostración, consulte la Guía de prueba práctica...

CVE-2026-66324

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-58616

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

OnionBrowser v3.4.1

Onion Browser Official Site | Support | Release History | Donate © 2012-2024, Tigas Ventures, LLC Mike Tigas This is the Onion Browser3.X branch. The older versions of Onion Browser can be found here and here. Onion Browser is a free web browser for iPhone and iPad that encrypts and tunnels web...

Fedora 43 : epiphany (2026-e205f21e0d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e205f21e0d advisory. Automatic update for epiphany-49.9.1-1.fc43. Changelog for epiphany Thu Aug 13 2026 Packit - 1:49.9.1-1 - Update to 49.9.1 upstream release Tenable...

The vulnerability in Google Chrome and Microsoft Edge web browsers, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Browser component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Browser component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability in the Google Chrome web browser, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...

The vulnerability of the Browser component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Browser component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...