Chromium: CVE-2026-14126 Incorrect security UI in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-14126

Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14126

creationtimestamp| type| source ---|---|--- 2026-07-02 01:47:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvz5xngw23 2026-07-02 01:47:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvz65g2s26 2026-07-02 08:18:48+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-14126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

DEBIAN-CVE-2026-14126

Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14126

Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-14126

A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. Affected is an unknown function of the component Web Interface. Such manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the publi...

CVE-2025-14126

creationtimestamp| type| source ---|---|--- 2025-12-06 11:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7cu6grrll2x...

MAL-2025-14126 Malicious code in aedmapper (npm)

The package aedmapper was found to contain malicious code...

CVE-2020-14126

creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:29+00:00| seen| https://t.me/cibsecurity/46823...

CVE-2020-14126

Technical details about CVE-2020-14126 are not provided in the connected documents. Public information in the initial entry notes information leakage via illegal JS interface calls, but no concrete affected products, versions, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2020-14126

Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

CVE-2019-14126

...

CVE-2019-14126

CVE-2019-14126 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-20607

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

Heap overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

CVE-2019-20607

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

WordPress Participants Database < 1.7.5.10 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Participants Database 1.7.5.10 - XSS Google Dork: inurl:wp-content/plugins/participants-database/ Date: 01-Sep-17 Exploit Author: Benjamin Lim Vendor Homepage: https://xnau.com/ Software Link:...

CVE-2017-14126

The Participants Database plugin before 1.7.5.10 for WordPress has XSS...

CVE-2017-14126

The CVE-2017-14126 entry concerns the WordPress Participants Database plugin prior to version 1.7.5.10, which is affected by a Cross-Site Scripting (XSS) flaw. The root cause is that text input data (notably the signup form’s Name field) is passed without escaping HTML special characters, enablin...