39732 matches found
DEBIAN-CVE-2026-87463
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
SUSE CVE-2026-27657
Gitea versions before 1.25.5 allow a user to change another user's primary email address...
CVE-2026-87597
Google Chrome on Android versions prior to 153.0.8010.36 is vulnerable to a UI misrepresentation in CustomTabs . This flaw allows a remote attacker to spoof the address bar through a co-installed application. Remediation involves updating the software to a patched version, such as the one provide...
EUVD-2026-74459
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87463
A flaw in the Certificate component of Chromium (and Google Chrome on Android prior to version 153.0.8010.36) allows for incorrect authorization , enabling a remote attacker to potentially spoof the address bar via crafted network traffic. This could mislead users regarding a website's authentici...
CVE-2026-87463
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...
EUVD-2026-74452
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...
CVE-2026-87463
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...
CVE-2026-87463
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-87567
A UI misrepresentation vulnerability in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to spoof the address bar using a crafted domain name. The Chromium security team rated this Medium severity. NVD scored it 4.3 (CVSS 3.1) with lo...
EUVD-2026-74373
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-87486
CVE-2026-87486 is a clickjacking vulnerability in the TrustedWebActivities component of Google Chrome on Android prior to version 153.0.8010.36 . A local attacker could exploit this to spoof the address bar via a co-installed application. The Chromium security severity is rated as Medium . Impact...