chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive informatio...

chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

Important: Red Hat Security Advisory: python3.12-lxml security update

An update for python3.12-lxml is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CLEANSTART-2026-MR80646 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the containerd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-UW47196 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the containerd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-EK34010 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the containerd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-OH56215 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the containerd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-AJ28533 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the containerd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-GK03402 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

Security vulnerability affects the buildkitd package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...

CVE-2026-103445

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS. This issue affects MediaWiki PageForms extension: 1.46, 1.45, and 1.43...

CVE-2026-103439 Various rawParams() and escaped() updates to prevent XSS in Wikibase extension

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43...

CVE-2026-103439

The MediaWiki Wikbase extension (versions 1.46, 1.45, and 1.43 ) is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of script-related HTML tags. The root cause involves issues within the rawParams() and escaped() functions. While the documents do not provide specific e...

CVE-2026-103439 Various rawParams() and escaped() updates to prevent XSS in Wikibase extension

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43...

CVE-2026-103438 Various rawParams() and escaped() updates to prevent XSS in Wikistories extension

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikistories extension: 1.46, 1.45, and 1.43...

CVE-2026-103438

The The Wikimedia Foundation MediaWiki Wikistories extension is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of Script-Related HTML tags in a web page. This vulnerability specifically affects versions 1.46, 1.45, and 1.43 . The issue is addressed through updates to ...

CVE-2026-103438 Various rawParams() and escaped() updates to prevent XSS in Wikistories extension

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikistories extension: 1.46, 1.45, and 1.43...

CVE-2026-103444

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

CVE-2026-100811

A flaw was found in Firefox. A use-after-free memory flaw in the Document Object Model DOM Core and HTML component allows a remote attacker to perform a sandbox escape. By enticing a user to visit a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code...

EUVD-2026-90082

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...