EUVD-2026-50729

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66099

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Isolated Web Apps allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

Linux Distros Unpatched Vulnerability : CVE-2026-17909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via...

Linux Distros Unpatched Vulnerability : CVE-2026-17780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a...

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to buffer overflow in the stack, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise text editors arises from improper validation of certain input types, allowing attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2026-17909: Improper Input Validation

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

PT-2026-66228

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise, related to reading data outside of the allowed range in memory, allows attackers to disclose sensitive information.

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2026-17780: Improper Access Control

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

cve-2026-47858 - HIGH - CVE-2026-47858: live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. This affects the live information feature across all environments Eclipse, Visual Studio Code, Theia, Cursor except the...

CVE-2026-13886

A policy bypass flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500475136...

CVE-2026-14042

An inappropriate implementation flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497558336...

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fixes: yelp: yelp-xsl: Overly Permissive Content Security Policy i...

CVE-2026-16587: Missing Authorization

The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

The vulnerability of the spring-cloud-azure-starter-active-directory-b2c component of the Microsoft Azure Spring Apps cloud service allows a perpetrator to escalate their privileges.

The vulnerability of the spring-cloud-azure-starter-active-directory-b2c component of the Microsoft Azure Spring Apps cloud service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

CVE-2026-43672

An authorization issue exists in macOS that allows a malicious application to potentially bypass Privacy preferences . The vulnerability stems from inadequate state management and has been addressed in macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.6 . While the specific technica...

CVE-2026-28911

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process...