PT-2026-88736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in the XML processing of the browser. This allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to visit ...

PT-2026-88751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-88756

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper state validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-88639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Network component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information from a...

PT-2026-88594

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a use...

PT-2026-88684

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the WebUI allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update Google...

PT-2026-88674

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the ServiceWorker, which allows a remote attacker to obtain cross-origin data by using a crafted HTML page. ServiceWorker is a script that the browser runs...

PT-2026-88723

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the DOM Document Object Model, which is the programming interface for HTML and XML documents, allows a remote attacker to obtain sensitive information. This...

Linux Distros Unpatched Vulnerability : CVE-2026-85485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3...

Linux Distros Unpatched Vulnerability : CVE-2026-19872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and...

EulerOS 2.0 SP12 : perl-HTML-Parser (EulerOS-SA-2026-3368)

According to the versions of the perl-HTML-Parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing...

EulerOS 2.0 SP12 : perl-HTML-Parser (EulerOS-SA-2026-3293)

According to the versions of the perl-HTML-Parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing...

Linux Distros Unpatched Vulnerability : CVE-2026-85630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with field...

Linux Distros Unpatched Vulnerability : CVE-2026-85484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup,...

PT-2026-88666

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Layout component allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google...

ROS-20260908-73-0098

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260908-73-0105

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

PT-2026-88687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...

Cross-Site Scripting (XSS)

org.springframework.security, spring-security-oauth2-authorization-server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the default consent page rendering user-controlled values without proper HTML entity encoding, which allows an attacker to inject malicious HTML or...

DOMPurify v3.4.15

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.16. DOMPurify runs as JavaScript and works in all modern browsers...