CVE-2026-95376

An externally controlled reference flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513134076...

CVE-2026-95336

An information leak flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/532962621...

CVE-2026-95276

An improper input validation flaw was found in the Themes component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517730821...

CVE-2026-95370

An inappropriate implementation flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517417437...

CVE-2026-95362

A cross-site request forgery flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/511791538...

CVE-2026-95349

A buffer overflow flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553172761...

CVE-2026-95318

A buffer overflow flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576976...

CVE-2026-95350

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/551573368...

CVE-2026-95280

A race condition flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/560406548...

CVE-2026-101890 Prime Mover < 2.2.1 Stored XSS via Package Metadata

The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped sitetitle value in a package's footprint.json file. Attackers can place a crafted package under the...

CLEANSTART-2024-FY86673 Use after free in Browser UI in Google Chrome on Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in Browser UI in Google Chrome on Chrome prior to 92...

CLEANSTART-2024-RR96243 Use after free in Browser Switcher in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Browser Switcher in Google Chrome prior to 101...

CLEANSTART-2024-KT86394 Use after free in Browser UI in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Browser UI in Google Chrome prior to 101...

CVE-2026-102314

An ui misrepresentation flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514059780 https://code.google.com/p/chromium/issues/detail?id=102314...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

CVE-2026-102317

An improper privilege management flaw was found in the Mojo component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517312707 https://code.google.com/p/chromium/issues/detail?id=102317...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-87970

The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it in an unauthenticated AJAX response that is served as HTML, allowing attackers to execute arbitrary JavaScript in the browser of a visitor who opens a crafted link...

CVE-2026-92412 Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin (versions before 2.3.14 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly escape user-supplied values before they are outputted into an HTML tag. This allows unauthenticated attackers to inj...