52976 matches found
UBUNTU-CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-48081
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store "javascript:" URLs in the tenant "links" configuration "website", "imprint", "privacyStatement". These values are returned to the...
CVE-2026-19177
Google Chrome (and Chromium-based browsers such as Microsoft Edge ) are affected by CVE-2026-19177 , which involves insufficient validation of untrusted input in the UI . A remote attacker who has already compromised the renderer process can exploit this to potentially perform a sandbox escape us...
CVE-2026-19173
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19164
The Codecs components in Google Chrome and Microsoft Edge are vulnerable to a memory use-after-free issue due to insufficient validation of untrusted input . A remote attacker can exploit this by serving a crafted HTML page to execute arbitrary code within the sandbox environment. Affected versio...
CVE-2026-19162
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-19162
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-19160
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-19150
An inappropriate implementation in the V8 engine in Google Chrome prior to version 151.0.7922.109 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability is also present in Chromium and affects Microsoft Edge (Chromium-based). Exploitation o...
CVE-2026-19146
Google Chrome on Android (prior to version 151.0.7922.109 ) is vulnerable to an Uninitialized Use in the GPU component. A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to extract sensitive information from process memory. This vulnerability has ...
CVE-2026-19140
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19140
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19138
Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19168
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-19168
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-19169
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...
CVE-2026-19149
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
Malicious code in xdaxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cd212c80bcca22443f4498afeadb70b93268b5904daa521b83242513d478bd The tarball contains a working browser-side account-takeover payload gated to run on noviembrenacional.com. When loaded in a logged-in victim's...
Malicious code in xxdxax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8922341a391ea133f4e6b95d55da2a7ee404c99a9f88f75bdc2698d3f03cc97c The package's main file i.js is an obfuscated browser-side script — its de-obfuscated form is shipped alongside as original.js — that gates execution...
