52751 matches found
Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities
Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with...
DRUPAL-CONTRIB-2026-116
This module enables you to create one or more multisites with highly granular page permissions. The module doesn't sufficiently sanitize HTML code contained in the page name when displayed in the built-in tree browser. This results in a cross-site scripting vulnerability that may allow attackers ...
CVE-2026-79284
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...
CVE-2026-79040
An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516950646...
CVE-2026-79225
A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...
CVE-2026-79021
A flaw was found in chromium-browser. This vulnerability, related to missing authorization in the InterestGroups component, allows a remote attacker to bypass system access restrictions. The attacker must first compromise the browser's rendering engine and then use a specially crafted PDF file to...
CVE-2026-79287
A flaw was found in chromium-browser. A remote attacker could exploit an observable discrepancy in Forms by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...
CVE-2026-79293
A flaw was found in chromium-browser. A remote attacker could exploit an information leak in the Animation component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...
CVE-2026-79274
A flaw was found in chromium-browser. A remote attacker could exploit a vulnerability in the GPU component by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other origins...
CVE-2026-79263
A flaw was found in Extensions in Google Chrome. This race condition vulnerability allows a remote attacker to execute arbitrary code. The attacker can achieve this by sending specially crafted network traffic, leading to code execution within the browser's security sandbox...
CVE-2026-78913
A flaw was found in chromium-browser. This use-after-free vulnerability in Chromoting allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by sending specially crafted network traffic, leading to unauthorized control over the affected system...
CVE-2026-79011
A flaw was found in Chromium Browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to bypass system access restrictions, potentially leading to...
CVE-2026-79034
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS. This vulnerability allows the attacker to leak sensitive cross-origin data by tricking a user into visiting a specially crafte...
CVE-2026-79023
A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...
CVE-2026-78956
A flaw was found in Chromium's V8 JavaScript engine. This type confusion vulnerability could allow a remote attacker, through social engineering, to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized...
CVE-2026-78912
A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation, allowing the attacker to spoof UI elements and potentially deceive users...
CVE-2026-78944
A flaw was found in chromium-browser. This use-after-free vulnerability in Google Chrome's DevTools allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can occur if a user is deceived through social engineering into installing a malicious Chrome extensio...
CVE-2026-78907
A flaw was found in chromium-browser's WebProtect component. Incorrect authorization allows a remote attacker to leak sensitive information. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-79226
A flaw was found in chromium-browser. This vulnerability, related to improper privilege management in Regional Capabilities, allows a remote attacker to bypass system access restrictions. By leveraging social engineering and a crafted Chrome extension, an attacker can gain unauthorized access...