burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2026-87512

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

CVE-2026-87488

A flaw was found in chromium-browser. A use-after-free vulnerability in WebGL, a web graphics library, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-87438

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-84325

A flaw was found in chromium-browser. This improper input validation vulnerability in the DataTransfer component allows a remote attacker, through social engineering, to bypass system access restrictions by leveraging a co-installed application. This could lead to unauthorized access to sensitive...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87622

A flaw was found in chromium-browser. Missing authorization in the Federated Credential Management FedCM API allowed a remote attacker to bypass the web origin policy. This bypass could be achieved by enticing a user to visit a crafted HTML page, potentially leading to unauthorized access to...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87653

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...

CVE-2026-87507

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to user interface UI misrepresentation within the Downloads section, allowing the attacker to...

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

CVE-2026-87501

An ui misrepresentation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513509804...

CVE-2026-87635

An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522304737...

CVE-2026-87493

A flaw was found in chromium-browser. Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87649

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...

CVE-2026-87657

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542146471...

CVE-2026-87655

A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...

CVE-2026-87515

A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...

CVE-2026-87472

A flaw was found in chromium-browser. Improper input validation in the Federated Credential Management FedCM component of Google Chrome allows a remote attacker, who has already compromised the renderer process, to spoof user interface UI elements. This can be achieved by providing a specially...