chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia

A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into opening a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...

chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive informatio...

chromium: skia: chromium: skia: Heap buffer overflow in Skia

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2026-51565

CVE-2026-51565 CVE-2026-51565 に関するセキュリティアドバイザリ 説明 Modules/Docs/DocsController.php における Milk admin =0.9.8 のクロスサイトスクリプティング（XSS）脆弱性により、リモートの攻撃者が巧妙に細工されたリクエストの action パラメータを介して、任意の Web スクリプトまたは HTML を注入できる可能性があります。 緩和策 公開時点では、この脆弱性に対する公式パッチは開発者から提供されておらず、私が報告してから5か月が経過しています。更新版がリリースされるまでは、ModSecurity...

CVE-2023-45540

HTML-Injection...

CVE-2026-94488: Improper Neutralization of Input During Web Page Generation

Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. The first fixed stable version is 7.0.1. This occurs in button.text.toUtf8 in exportoutputhtml.cpp. Exploitation cannot occur unless HTML export was used by a victim. However, the exploit payload can be exported if a message were...

RHEL 9 : rhc (RHSA-2026:69104)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69104 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

ROS-20260921-73-0092

The vulnerability is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

CVE-2026-73546: Improper Neutralization of Input During Web Page Generation

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's /stats?format=html admin endpoint uses StatsHtmlRender, which sanitizes string statistic values but emits statistic names without HTML encoding. A data-plan...

RHEL 10 : rhc (RHSA-2026:69103)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69103 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

CVE-2025-66849

CVE-2025-66849 Ghost CMS 権限昇格 PoC 概要 Ghost Foundation の Ghost CMS バージョン 6.4.0 以前において、投稿下書きエディタ内の HTML ブロックがユーザー提供のコンテンツを適切にサニタイズまたはエンコードしないため、保存型クロスサイトスクリプティング XSS の脆弱性が発生します。Contributor 権限を持つユーザーが下書きに任意の JavaScript を注入でき、Owner アカウントが閲覧した際に実行されます。これにより、攻撃者は Owner のコンテキストで特権アクションを実行できる可能性があります。...

CVE-2020-12625

CVE-2020-12625: Roundcube Webmail における悪意のある HTML 添付ファイルを介したクロスサイトスクリプティング クロスサイトスクリプティング（XSS）の脆弱性が、Roundcube の 1.4.4、1.3.11、1.2.10 より前のバージョンに存在します。 攻撃者は、"text/html" 添付ファイルを含むメール内の "" XML 要素を利用することで、Roundcube のスクリプトフィルタをバイパスし、悪意のあるメールがクリックされたときに被害者のブラウザ上で任意の悪意のある JavaScript を実行できます。 ベンダー開示:...