ROS-20260911-73-0125

A vulnerability in the ANGLE component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied data. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

ROS-20260911-73-0128

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260911-73-0129

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ROS-20260911-73-0244

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-68528: Improper Neutralization of Input During Web Page Generation

Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting. An attacker able to control a title in a syndicated feed could execute script in the site origin for any visitor to the affected page, including...

PT-2026-89999

Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting. An attacker able to control a title in a syndicated feed could execute script in the site origin for any visitor to the affected page, including...

ROS-20260911-73-0141

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML...

ROS-20260911-73-0196

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

ROS-20260911-73-0210

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

ROS-20260911-73-0174

The vulnerability of the Bluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

ROS-20260911-73-0117

The vulnerability of the Glic component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0175

The vulnerability of Google Chrome’s Autofill function relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

ROS-20260911-73-0153

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0185

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260911-73-0165

The vulnerability of the Workers component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260911-73-0085

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0134

The vulnerability of the WebXR component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0137

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0066

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260911-73-0239

The vulnerability of XML components in Google Chrome and Microsoft Edge lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...