CVE-2026-91741: Access of Resource Using Incompatible Type

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91736: Use After Free

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91719: Improper Control of Generation of Code

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-92161

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description An HTML injection flaw allows a remote attacker to inject malicious HTML code. When viewed, this code is executed in the victim's web browser within the security...

ROS-20260915-73-0036

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0008

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0074

The vulnerability of Google Chrome and Microsoft Edge web browsers’ Plugin components is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0129

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0083

The vulnerability of the Content Settings component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...

ROS-20260915-73-0109

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0065

The vulnerability of the File Input service in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface through a created HTML page...

PT-2026-91958

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 115.41 Firefox ESR versions prior to 140.16 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 140.16 Thunderbird versions prior to...

ROS-20260915-73-0084

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML...

ROS-20260915-73-0157

The vulnerability of the SVG component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ROS-20260915-73-0159

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ROS-20260915-73-0062

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...

PT-2026-92165

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0 through 9.5.2 Description The Top Navigation Bar block fails to HTML-escape dropdown child page names before rendering them on the page. This allows a user with permissions to create or rename pages to inject a...

ROS-20260915-73-0061

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...

ROS-20260915-73-0048

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0030

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...