46493 matches found
CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection
A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...
MAL-2026-6794 Malicious code in zod-pino434 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a5d533bf699156b78f5296f643227bf3e43d8e46f2adabfe250205a05bd26 Package name zod-pino434 and package.json description Node.js integration layer for Autodesk Forge do not match the shipped code. On npm install, the...
[SECURITY] Fedora 43 Update: chromium-150.0.7871.46-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2026-58597
Insufficient ui warning of dangerous operations in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58284
Improper authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-58291
Operation on a resource after expiration or release in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57975
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-57983
Improper authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-57984
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-56646
Exposure of sensitive information to an unauthorized actor in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-45488
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
EUVD-2026-41597
Insufficient ui warning of dangerous operations in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58298 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
CVE-2026-58295
CVE-2026-58295 affects Microsoft Edge (Chromium-based). A resource access type confusion allows a network-based attacker to bypass a security feature without user interaction (CVSS v3.1: 8.3). No exploitation details are provided beyond MSRC reference; remediation is to apply the appropriate Edge...
CVE-2026-58293
External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-58293
CVE-2026-58293 affects Microsoft Edge (Chromium-based). It describes external control of a file name or path that allows an unauthenticated attacker to execute code over the network. The CVSSv3.1 base score is 8.1 (High) with attack vector Network, attack complexity High, privileges required None...
CVE-2026-58293 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...