52728 matches found
PT-2026-84854
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-16457 is a security vulnerability in QEMU. The specific details of thi...
CVE-2026-82640: Cleartext Storage of Sensitive Information
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...
CVE-2026-82637: External Control of File Name or Path
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in runagenttask, allowing attackers to create directories at arbitrary locations by supplying absolute paths to saverecordingpath, savetracepath, saveagenthistorypath, or savedownloadpath parameters. Attackers...
CVE-2026-82467 Rodauth before 2.47.0 Open Redirect via Return-to Path
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirmpassword, loginreturntorequestedlocation, and twofactorauthreturntorequestedlocation features. Attackers can craft paths with leading double slashes that browsers resolve as protocol-relative URLs, redirecting...
CVE-2026-82464 pac4j-core before 6.5.6 Open Redirect via Backslash Logout
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
CVE-2026-70331
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70309 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
EUVD-2026-67853
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70309
An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-72984
CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66798
Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...
CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
CVE-2026-66324
CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....
CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66323
Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...